Exam AAISM Topic 2 Question 407 Discussion

AI/ML threat modeling is the most effective structured method to both identify and address model security risks. It systematically surfaces attack classes (poisoning, evasion, membership inference, model extraction, inversion), maps system-specific attack surfaces (data pipelines, feature stores, training artifacts, inference APIs), and drives prioritized mitigations (ingestion validation, robust training, rate-limiting, watermarking, differential privacy, monitoring, red teaming). Output spot-checking (A) finds errors but not security vulnerabilities; encryption (C) protects confidentiality but does not reveal threats or mitigate inference-time attacks; adding data (D) may improve accuracy but does not target adversarial risk.
References: AI Security Management (AAISM) Body of Knowledge - AI Risk Identification & Threat Modeling; Attack Surface Analysis for ML; Risk Treatment Planning. AAISM Study Guide - Evasion
/Poisoning/Extraction Controls; Mapping Risks to Controls; Validation and Assurance Activities.