Comcast / Comcast/ProjectGuardRail

Mapping AI Adversarial Threats to CVEs and GuardRail Questions

Open
#9 0 comments 0 reactions 0 assignees View on GitHub
AI safety CVE mapping documentation good first issue questionnaire alignment risk assessment vulnerability analysis
Dominant language
No language data
Stars
32
Forks
7
PR merge metrics
No merged PRs in 30d

Description

**Description:**
We welcome contributions to help build a comprehensive mapping between AI adversarial threats, relevant Common Vulnerabilities and Exposures (CVEs), and GuardRail assessment questions. This unified effort aims to enhance the practical utility of the GuardRail framework in identifying, analyzing, and mitigating AI-related risks.

**Problem Overview:**
While many CVEs exist for AI/ML systems, they are not currently linked to specific adversarial threats, making structured vulnerability assessment difficult.

Similarly, GuardRail provides a structured set of questions for evaluating AI systems, but lacks direct mapping to known adversarial threats, limiting its effectiveness in threat modeling.

**Contribution Scope:**
- Curate a list of CVEs relevant to AI/ML systems.
- Identify and document known AI adversarial threats.
- Map CVEs to corresponding adversarial threats.
- Map adversarial threats to relevant GuardRail questions.
- Propose new threat categories or suggest improvements to question phrasing where gaps are identified.

**Impact:**
- Enhances traceability between threats, vulnerabilities, and assessment criteria.
- Strengthens the GuardRail framework for real-world adversarial scenarios.
- Supports robust AI system design, auditing, and compliance.
- Improves usability for security and privacy engineers.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.