Risk Glossary
Comprehensive catalog of AI security risks, TTPs, and impacts
11
categorys
12
deliverys
2
impacts
5
mitigations
4
ttps
CATEGORY
Risk: 80
User Inputs
TAXONOMY
NIST:Unintended Output
MIT:Malicious Actors & Misuse
EXAMPLES
- •chat UI
- •clipboard paste
MITIGATIONS
input normalization
heuristic detectors
rate limits
DELIVERY
Risk: 85
Chat UI / Web App
TAXONOMY
NIST:Unintended Output
EXAMPLES
- •web chat widget, intranet copilot
MITIGATIONS
canonicalization
prompt provenance
warn mode
DELIVERY
Risk: 78
Clipboard / Paste
TAXONOMY
MIT:Human-Computer Interaction
EXAMPLES
- •user pastes prompt template from Slack/Reddit
MITIGATIONS
endpoint agent clipboard monitor
UI paste warning
DELIVERY
Risk: 55
Voice-to-Text Input
TAXONOMY
NIST:Unintended Output
EXAMPLES
- •assistant voice request
MITIGATIONS
ASR post-normalization
sensitive-action confirmation
CATEGORY
Risk: 88
File Uploads & Document Ingest
TAXONOMY
NIST:Model Integrity Degradation
MIT:Supply Chain & Misuse
EXAMPLES
- •PDF, DOCX, spreadsheets, images
MITIGATIONS
metadata stripping
YARA-like scans
quarantine
DELIVERY
Risk: 90
DOCX / PDF Upload
TAXONOMY
NIST:Model Integrity Degradation
EXAMPLES
- •hidden comments, macros, metadata instructions
MITIGATIONS
macro disable
hidden text detection
format conversion
CATEGORY
Risk: 82
Connectors & Integrations
TAXONOMY
NIST:Access to Unauthorized Information
MIT:Malicious Actors & Misuse
EXAMPLES
- •Google Drive, Slack, GitHub, OneDrive
MITIGATIONS
least-privilege tokens
connector audit
sync quarantine
DELIVERY
Risk: 85
Drive / SharePoint Connector
TAXONOMY
NIST:Data Privacy Violation
EXAMPLES
- •auto-sync of corpora
MITIGATIONS
scoped tokens
on-first-sync review
CATEGORY
Risk: 83
APIs & SDKs
TAXONOMY
NIST:System Manipulation
MIT:Cyberattacks
EXAMPLES
- •inference endpoints, webhooks, function-calls
MITIGATIONS
schema validation
function whitelists
auth rotation
DELIVERY
Risk: 84
Model Inference Endpoint
TAXONOMY
NIST:Unintended Output
EXAMPLES
- •REST/gRPC inference calls
MITIGATIONS
request validation
rate limiting
monitoring
CATEGORY
Risk: 90
Agentic Systems & Automation
TAXONOMY
NIST:Model Integrity Degradation
MIT:Malicious Actors & Misuse
EXAMPLES
- •autonomous agents, RAG agents
MITIGATIONS
capability gating
human-approval gates
DELIVERY
Risk: 92
Orchestrator / Agent Runner
TAXONOMY
NIST:Access to Unauthorized Information
EXAMPLES
- •agent chains that call APIs or change infra
MITIGATIONS
sandboxing
time-limited tokens
audit trails
CATEGORY
Risk: 95
Training & Fine-tune Pipelines
TAXONOMY
NIST:Model Integrity Degradation
MIT:Supply Chain
EXAMPLES
- •dataset ingestion, annotator platforms
MITIGATIONS
data provenance
robust training checks
holdout validation
DELIVERY
Risk: 93
Vector DB / RAG Store
TAXONOMY
NIST:Data Privacy Violation
EXAMPLES
- •embeddings ingestion, retrieval corpora
MITIGATIONS
ingest sanitization
vector integrity checks
CATEGORY
Risk: 94
Model Artifacts & Supply Chain
TAXONOMY
MIT:Supply Chain
NIST:Model Integrity Degradation
EXAMPLES
- •third-party weights, container images, libs
MITIGATIONS
signed artifacts
SBOM
verified registries
DELIVERY
Risk: 96
Third-Party Model Weights
TAXONOMY
NIST:Model Integrity Degradation
EXAMPLES
- •downloaded checkpoints, trojaned weights
MITIGATIONS
checksum verification
signature validation
CATEGORY
Risk: 80
Runtime Infrastructure
TAXONOMY
NIST:Security Vulnerability Exposure
EXAMPLES
- •inference hosts, cache, load balancers
MITIGATIONS
segmentation
runtime hardening
resource monitoring
DELIVERY
Risk: 82
Inference Node (GPU/TPU)
TAXONOMY
NIST:Security Vulnerability Exposure
EXAMPLES
- •serving node, edge inference box
MITIGATIONS
seccomp, container isolation
hardware access controls
CATEGORY
Risk: 86
Management & Orchestration
TAXONOMY
NIST:Supply Chain
MIT:Governance
EXAMPLES
- •CI/CD, parameter stores, model registry
MITIGATIONS
signed CI artifacts
RBAC
gitops
DELIVERY
Risk: 88
CI/CD Pipeline
TAXONOMY
MIT:Supply Chain
EXAMPLES
- •automated deployments of models/services
MITIGATIONS
artifact signing
approval gates
immutable tags
CATEGORY
Risk: 70
Monitoring, Logs & Telemetry
TAXONOMY
NIST:Data Privacy Violation
EXAMPLES
- •log aggregation, replay stores
MITIGATIONS
hash/redact prompts
tamper-evident logs
DELIVERY
Risk: 65
SIEM / Log Aggregator
TAXONOMY
MIT:Governance
EXAMPLES
- •Graylog, Splunk, Elastic
MITIGATIONS
redaction
encrypted transport
retention policy
CATEGORY
Risk: 79
Human & Social Channels
TAXONOMY
MIT:Malicious Actors & Misuse
EXAMPLES
- •phishing, insider leaks
- •shared templates
MITIGATIONS
training
DLP
admin approvals
IMPACT
Risk: 98
Impact: Data Exfiltration
TAXONOMY
NIST:Data Privacy Violation
EXAMPLES
- •leak PII, IP, credentials
MITIGATIONS
block, quarantine
incident response
IMPACT
Risk: 96
Impact: Unauthorized Execution
TAXONOMY
NIST:System Manipulation
EXAMPLES
- •agent executes harmful commands
MITIGATIONS
human approval
rollback
revoke tokens
MITIGATION
Risk: 10
Mitigation: Input Normalization
EXAMPLES
- •unicode normalization
- •decode base64
MITIGATION
Risk: 12
Mitigation: TPROXY / Proxy Inspection
EXAMPLES
- •nft TPROXY redirect to mitmproxy/Envoy
MITIGATION
Risk: 15
Mitigation: Rulepacks (YARA/Regex)
EXAMPLES
- •lexical rules
- •obfuscation detectors
MITIGATION
Risk: 8
Mitigation: Human Approval Gate
EXAMPLES
- •two-man rule for function calls
MITIGATION
Risk: 18
Mitigation: Data & Model Provenance
EXAMPLES
- •signed datasets
- •SBOM
TTP
Risk: 95
TTP: Prompt Injection / Jailbreak
TAXONOMY
NIST:Unintended Output
EXAMPLES
- •ignore prior instructions
MITIGATIONS
rulepacks
context validation
TTP
Risk: 88
TTP: Obfuscation / Encoding
EXAMPLES
- •base64
- •JSFuck
MITIGATIONS
input_normalization
decoder detection
TTP
Risk: 97
TTP: Data Poisoning / Backdoor
TAXONOMY
NIST:Model Integrity Degradation
EXAMPLES
- •embedding poisoning
- •targeted poisoned examples
MITIGATIONS
provenance
holdout validation
TTP
Risk: 93
TTP: Function-Call Abuse
TAXONOMY
NIST:System Manipulation
EXAMPLES
- •model crafts API call to exfiltrate data
MITIGATIONS
function whitelists
sandbox execution
Select a node to view detailed information and connections