You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: content/ai_exchange/content/docs/ai_security_overview.md
+29-7
Original file line number
Diff line number
Diff line change
@@ -2,8 +2,34 @@
2
2
title: 0. AI Security Overview
3
3
weight: 1
4
4
---
5
+
## About the AI Exchange
6
+
>Category: discussion
7
+
>Permalink: https://owaspai.org/goto/about/
8
+
The OWASP AI Exchange has open sourced the global discussion on the security of AI and data-centric systems. It is an open collaborative project to advance the development of AI security standards and regulations, by providing a comprehensive overview of AI threats, controls and security best practices. This content is feeding into standards for the EU AI Act, ISO/IEC 27090 (AI security), the [OWASP ML top 10](https://mltop10.info/), the [OWASP LLM top 10](https://llmtop10.com/), and [OpenCRE](https://opencre.org) - which we want to use to provide the AI Exchange content through the security chatbot [OpenCRE-Chat](https://opencre.org/chatbot).
9
+
10
+
Data-centric systems can be divided into AI systems and 'big data' systems that don't have an AI model (e.g. data warehousing, BI, reporting, big data) to which many of the threats and controls in the AI Exchange are relevant: data poisoning, data supply chain management, data pipeline security, etc.
11
+
12
+
Our **mission** is to be the go-to resource for AI security practitioners, to foster alignment, and drive collaboration among initiatives. By doing so, we provide a safe, open, and independent place to find and share insights for everyone. Follow [AI Exchange at LinkedIn](https://www.linkedin.com/company/owasp-ai-exchange/).
13
+
14
+
The AI Exchange is displayed here at [owaspai.org](https://owaspai.org) and edited using a [GitHub repository](https://github.com/OWASP/www-project-ai-security-and-privacy-guide/tree/main/content/ai_exchange/content) (see the links _Edit on Github_). It is is an **open-source living publication** for the worldwide exchange of AI security expertise, and part of the [OWASP AI security & privacy guide](https://owasp.org/www-project-ai-security-and-privacy-guide/) project. It is structured as one coherent resource consisting of several sections under 'content', each represented by a page on this website.
15
+
16
+
<pxmlns:cc="http://creativecommons.org/ns#"xmlns:dct="http://purl.org/dc/terms/"><aproperty="dct:title"rel="cc:attributionURL"href="https://owaspai.org">OWASP AI Exchange</a> by <spanproperty="cc:attributionName">The AI security community</span> is marked with <ahref="http://creativecommons.org/publicdomain/zero/1.0?ref=chooser-v1"target="_blank"rel="license noopener noreferrer"style="display:inline-block;">CC0 1.0</a> meaning you can use any part freely without copyright and without attribution. If possible, it would be nice if the OWASP AI Exchange is credited and/or linked to, for readers to find more information.</p>
17
+
18
+
The AI Exchange was founded by [Rob van der Veer](https://www.linkedin.com/in/robvanderveer/) - bridge builder for security standards, Chief AI Officer at [Software Improvement Group](https://www.softwareimprovementgroup.com), with 33 years of experience in AI & security, lead author of ISO/IEC 5338 on AI lifecycle, founding father of OpenCRE, and currently working on security requirements in ISO/IEC 27090 and the EU AI act in CEN/CENELEC.
19
+
20
+
This material is evolving constantly through open source continuous delivery. The authors group consists of 65 experts (researchers, practitioners, vendors, data scientists, etc.) and other people in the community are welcome to provide input too. See the [contribute page](/contribute).
21
+
22
+
Other OWASP AI initiatives:
23
+
24
+
{{< cards >}}
25
+
{{< small-card link="https://owaspai.org/" title="OWASP AI Exchange (this)" icon="lock-closed" >}}
{{< small-card link="https://llmtop10.com/" title="LLM Top 10" icon="brain" >}}
28
+
{{< small-card link="https://mltop10.info/" title="ML Top 10" icon="machinelearning" >}}
29
+
{{< /cards >}}
30
+
31
+
5
32
## Summary - How to address AI Security?
6
-
>See [home](https://owaspai.org/) for more information about this initiative, the OWASP AI Exchange, how to contribute or connect.
7
33
>Category: discussion
8
34
>Permalink: https://owaspai.org/goto/summary/
9
35
@@ -21,9 +47,9 @@ Note that an AI system can for example be a Large Language Model, a linear regre
21
47
22
48
---
23
49
24
-
## About this Document
50
+
## How to use this Document
25
51
>Category: discussion
26
-
>Permalink: https://owaspai.org/goto/about/
52
+
>Permalink: https://owaspai.org/goto/document/
27
53
28
54
This page contains an overview of AI security and the next pages provide the main content about security threats to AI and controls against them, organized by attack surface:
29
55
1.[General controls, such as AI governance](/goto/generalcontrols/)
@@ -35,10 +61,6 @@ You can navigate through pages at the bottom of every page, or in the left sideb
35
61
36
62
Security here means preventing unauthorized access, use, disclosure, disruption, modification, or destruction. Modification includes manipulating the behaviour of an AI model in unwanted ways.
37
63
38
-
The AI Exchange initiative was taken by OWASP, triggered by [Rob van der Veer](https://www.linkedin.com/in/robvanderveer/) - bridge builder for security standards, senior director at [Software Improvement Group](https://www.softwareimprovementgroup.com), with 31 years of experience in AI & security, lead author of ISO/IEC 5338 on AI lifecycle, founding father of OpenCRE, and currently working on security requirements concerning the EU AI act in CEN/CENELEC.
39
-
40
-
This material is evolving constantly through open source continuous delivery. The authors group consists of 50 experts (researchers, practitioners, vendors, data scientists, etc.) and other people in the community are welcome to provide input too. See the [contribute page](/contribute).
41
-
It serves as input to ongoing key initiatives such as the EU AI act, ISO/IEC 27090 on AI security, ISO/IEC 27091 on AI privacy, the [OWASP ML top 10](https://mltop10.info/), [OWASP LLM top 10](https://llmtop10.com/), and many more initiatives can benefit from consistent terminology and insights across the globe.
0 commit comments