Search papers, labs, and topics across Lattice.
This paper investigates the application of cyber threat intelligence (CTI) to address security threats targeting AI systems, highlighting the limitations of traditional cyber defenses. It analyzes conventional threat intelligence workflows in the context of AI-specific assets and vulnerabilities, and organizes the current landscape of AI security knowledge. The authors propose an AI-oriented threat intelligence knowledge base with concrete indicators of compromise (IoC) for different AI supply-chain phases, and discuss techniques for measuring similarity between collected indicators and newly observed AI artifacts.
Traditional cybersecurity is failing to protect AI systems, demanding a new threat intelligence framework tailored to AI-specific vulnerabilities and supply chains.
As artificial intelligence (AI) becomes deeply embedded in critical services and everyday products, it is increasingly exposed to security threats which traditional cyber defenses were not designed to handle. In this paper, we investigate how cyber threat intelligence (CTI) may evolve to address attacks that target AI systems. We first analyze the assumptions and workflows of conventional threat intelligence with the needs of AI-focused defense, highlighting AI-specific assets and vulnerabilities. We then review and organize the current landscape of AI security knowledge. Based on this, we outline what an AI-oriented threat intelligence knowledge base should contain, describing concrete indicators of compromise (IoC) for different AI supply-chain phases and artifacts, and showing how such a knowledge base could support security tools. Finally, we discuss techniques for measuring similarity between collected indicators and newly observed AI artifacts. The review reveals gaps and quality issues in existing resources and identifies potential future research directions toward a practical threat intelligence framework tailored to AI.
