53 / 70 · 07 Security Testing for AI Apps · Threat Modeling for AI Features with STRIDE← prev⊞ allnext →☰ Read as one page
9.2STRIDE + AI Threat Model
STRIDE is a classic threat modeling framework developed at Microsoft. Here is how each category applies to AI features:
| STRIDE Category | Traditional Threat | AI-Specific Threat |
|---|---|---|
| Spoofing | Fake user credentials | Prompt impersonating a system administrator |
| Tampering | Modified request parameters | Poisoned training data, manipulated embeddings |
| Repudiation | Unlogged user actions | AI decisions made without audit trail |
| Information Disclosure | Database exfiltration | Model memorization of training data, system prompt leak |
| Denial of Service | Traffic flood | Context window exploitation, recursive reasoning |
| Elevation of Privilege | SQL injection to admin | Prompt injection to access restricted tools |