Hi All,
Artificial Intelligence (AI) is influencing people's everyday lives and playing a key role in digital
transformation through its automated decision-making capabilities. The benefits of this
emerging technology are significant, but so are the concerns. The EU Agency for Cybersecurity
warns that AI may open new avenues in manipulation and attack methods, as well as new
privacy and data protection challenges.
This report presents the Agency's active mapping of the AI cybersecurity ecosystem and its
Threat Landscape, realised with the support of the Ad-Hoc Working Group on Artificial
Intelligence Cybersecurity. The main highlights of the report include the following:
Definition of the scope of AI in the context of cybersecurity following a lifecycle
approach. Taking into account the different stages of the AI lifecycle from requirements
analysis to deployment, the ecosystem of AI systems and applications is delineated.
Identification of assets of the AI ecosystem as a fundamental step in pinpointing what
needs to be protected and what could possibly go wrong in terms of security of the AI
ecosystem.
Mapping of the AI threat landscape by means of a detailed taxonomy. This serves as a
baseline for the identification of potential vulnerabilities and eventually attack scenarios
for specific use cases and thus serve in forthcoming sectorial risk assessments and
listing of proportionate security controls.
Classification of threats for the different assets and in the context of the diverse AI
lifecycle stages, also listing relevant threat actors. The impact of threats to different
security properties is also highlighted.
------------------------------
Michael Roza CPA, CISA, CIA, MBA, Exec MBA
------------------------------