Gamification for threat modeling of machine learning

Discussions AI/ML/Data
1

Are you letting the AI do the threat modeling for you?

1000×420 148 KB

There is no need to let the machines take over the world! Threat model using “Elevation of MLSec” on copi.owasp.org instead. Our survival depends on it!

At copi.owasp.org you can now play Elevation of MLSec to threat model your AI models.
Read more about “Elevation of MLSec” and the latest release of OWASP Cornucopia 2.3: Threat modeling your AI models using AI? - DEV Community
The game was created by Elias Brattli Sørensen and designed by Jorun Kristin Bremseth while working at Kantega. You can download the design files from their repository if you would like to print a physical version of the game. GitHub - kantega/elevation-of-mlsec: Elevation of MLsec: a threat-modeling card game for machine learning systems

Please don’t leave the threat modeling up to the AI, or it may take over the world!

Personally, I am very happy about their game and have used it myself to threat model our new AI features that we are delivering at Admincontrol. Ask me if you want an in-depth opinion.

2

Thanks for sharing this @Johan_Sydseter! @Elias_Sorensen hosted a live session of Elevation of MLSec at ThreatModCon in Barcelona last month, and it was a hit! Here are the slides for those interested in how to facilitate an Elevation of MLSec session: https://drive.google.com/file/d/1pLRtLtrOMrg3g0J6OeP1WxowTW-CDT_q/view?usp=sharing

3 Likes