Skip to content

fix(ai-agent): complete the ATR category mapping and repair its target reference #459

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
eeee2345 wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(ai-agent): complete the ATR category mapping and repair its target reference #459

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 17 additions & 3 deletions examples/ai-agent/atr-categories-to-capabilities-mapping.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ metadata:
description: >
Maps Agent Threat Rules (ATR) detection rule categories to the AI agent
capabilities that create the opportunity for each category of threat.
The source artifact is the ATR rule corpus, grouped by its nine detection
The source artifact is the ATR rule corpus, grouped by its detection
categories; the target artifact is the AI Agent Capability Catalog.
Relationships are expressed as relates-to following the convention that
external cross-references are refined by downstream consumers in their
Expand All @@ -30,7 +30,7 @@ metadata:
Open MIT detection standard for AI agent threats. Rules are grouped
into detection categories under rules/; the reference-ids below are
those category identifiers.
- id: ATR-AI-AGENT-CAP
- id: ATR-AI-AGENT-CAPABILITY-CATALOG
title: AI Agent Capability Catalog
version: "0.1.0"
description: >
Expand All @@ -41,7 +41,7 @@ source-reference:
reference-id: ATR
entry-type: Control
target-reference:
reference-id: ATR-AI-AGENT-CAP
reference-id: ATR-AI-AGENT-CAPABILITY-CATALOG
entry-type: Capability
remarks: >
Each source entry-id is an ATR rule category. Targets are capability ids in
Expand Down Expand Up @@ -205,3 +205,17 @@ mappings:
over-privileged skills, which can only execute because the agent
loads and runs third-party skills and plugins with its own
privileges.

- id: MAP-model-security
source: model-security
relationship: relates-to
targets:
- entry-id: CAP-MODEL-INFERENCE
strength: 6
confidence-level: Medium
rationale: >
Behaviour-extraction rules detect systematic probing of decision
boundaries and system prompts, which depends on the agent exposing
model inference to callers. The remaining rules in this category
address the model supply chain, which this capability catalog does
not yet model.
Loading