BSI AI Guideline

What a good start into the weekend ๐Ÿ˜Ž

๐Ÿ“„ The German BSI has published a guideline for developers regarding potential vulnerabilies in AI systems.

๐Ÿ“ฃ From my point of view, a security risk assessment on systems using AI technologies has to consider the attacks on the AI parts of the system as well. A security risk assessment only considering the IT security aspects of such systems but neglecting the AI security of the system cannot be considered as complete any more.

You can find the pdf at this link when searching for “AI security concerns in a nutshell – Practical AI-Security guide”.

Similar Posts

  • AI tracking

    AI can track the time you spend on your phone during work. The post below shows an interesting demonstration of the technical capabilities. From my point of view, these kind of AI applications will be and should be a focus of a broad public discussion in the near future. AI applications will offer great opportunities,…

  • WormGPT and FraudGPT

    As with any new technology, the “other side” is trying to figure out how to use it to their advantage. The normal commercial versions of LLMs have barriers built in to prevent the creation of malware code or phishing mails, for example. If you remove these barriers, you get the output that we as security…

  • Would you recognize?

    ๐Ÿ“ธ How good are you at recognising AI-generated people? โ“ Would you be sceptical if the person tried to connect with you on LinkedIn, for example? You can test yourself on these two sites: ๐ŸŒ Which Face Is Real?๐ŸŒ thispersondoesnotexist.com

  • AI in the rail sector

    We are already seeing real-world applications of artificial intelligence in the rail sector. Deutsche Bahn is using artificial intelligence to reduce delays on its network. My prediction: This is just the beginning of ML/AI applications in our sector. We will see machine learning and AI algorithms becoming more and more widespread in the coming years….

  • AI phishing

    Are the bad guys using AI? They might! AI tools like ChatGPT or DALL-E-2 are currently widely tested out on the internet – both for the good as well as for the bad. From my point of view, we are at the very beginning of an interesting development, which will unfold over the next couple…

  • ISO 42001 Practitioner certification

    This month I’ve earned the ISO/IEC 42001:2023. Artificial intelligence management system practitioner certification of rigcert.education. As AI systems become widely integrated into the business world, securely managing them is increasingly critical. How can organizations ensure the reliability of AI outputs, protect company data from loss, and maintain system availability? These topicsโ€”and many othersโ€”are addressed by…