Modeling Threats to AI-ML Systems Using STRIDE †

Lara Mauri, Ernesto Damiani

Research output: Contribution to journalArticlepeer-review

21 Scopus citations

Abstract

The application of emerging technologies, such as Artificial Intelligence (AI), entails risks that need to be addressed to ensure secure and trustworthy socio-technical infrastructures. Machine Learning (ML), the most developed subfield of AI, allows for improved decision-making processes. However, ML models exhibit specific vulnerabilities that conventional IT systems are not subject to. As systems incorporating ML components become increasingly pervasive, the need to provide security practitioners with threat modeling tailored to the specific AI-ML pipeline is of paramount importance. Currently, there exist no well-established approach accounting for the entire ML life-cycle in the identification and analysis of threats targeting ML techniques. In this paper, we propose an asset-centered methodology—STRIDE-AI—for assessing the security of AI-ML-based systems. We discuss how to apply the FMEA process to identify how assets generated and used at different stages of the ML life-cycle may fail. By adapting Microsoft’s STRIDE approach to the AI-ML domain, we map potential ML failure modes to threats and security properties these threats may endanger. The proposed methodology can assist ML practitioners in choosing the most effective security controls to protect ML assets. We illustrate STRIDE-AI with the help of a real-world use case selected from the TOREADOR H2020 project.

Original languageBritish English
Article number6662
JournalSensors (Switzerland)
Volume22
Issue number17
DOIs
StatePublished - Sep 2022

Keywords

  • artificial intelligence security
  • threat modeling
  • vulnerability assessment

Fingerprint

Dive into the research topics of 'Modeling Threats to AI-ML Systems Using STRIDE †'. Together they form a unique fingerprint.

Cite this