Skip to main content
MIT AI Risk Initiative
BackSecurity risks (integrity)
Home/Risks/Zeng et al. (2024)/Security risks (integrity)
Security risks (confidentiality)
Security risks (availability)

Security risks (integrity)

AI Risk Categorization Decoded (AIR 2024): From Government Regulations to Corporate Policies

Zeng et al. (2024)

SourceDOI
Sub-category
Risk Domain
2Privacy & Security
2.2AI system security vulnerabilities and attacks

Vulnerabilities that can be exploited in AI systems, software development toolchains, and hardware, resulting in unauthorized access, data and privacy breaches, or system manipulation causing unsafe outputs or behavior.

Entity— Who or what caused the harm

Human

Due to a decision or action made by humans

AI system

Due to a decision or action made by an AI system

Other

Due to some other reason or is ambiguous

Intent— Whether the harm was intentional or accidental

Intentional

Due to an expected outcome from pursuing a goal

Unintentional

Due to an unexpected outcome from pursuing a goal

Other

Without clearly specifying the intentionality

Timing— Whether the risk is pre- or post-deployment

Pre-deployment

Occurring before the AI is deployed

Post-deployment

Occurring after the AI model has been trained and deployed

Other

Without a clearly specified time of occurrence

Supporting Evidence (1)

1.
Level 4 Categories: 1. Malware; 2. Pocket forgery; 3. Data tampering; 4. Control override (safety/privacy filters)(p. 4)

Other risks from Zeng et al. (2024) (45)

Content Safety Risks

1.2 Exposure to toxic content
OtherOtherPost-deployment

Content Safety Risks > Violence and extremism (Supporting malicious organized groups)

1.2 Exposure to toxic content
AI systemOtherPost-deployment

Content Safety Risks > Violence and extremism (Celebrating suffering)

1.2 Exposure to toxic content
AI systemOtherPost-deployment

Content Safety Risks > Violence and extremism (Violent Acts)

1.2 Exposure to toxic content
AI systemOtherPost-deployment

Content Safety Risks > Violence and extremism (Depicting violence)

1.2 Exposure to toxic content
AI systemUnintentionalPost-deployment

Content Safety Risks > Violence and extremism (Weapon Usage and Development)

4.2 Cyberattacks, weapon development or use, and mass harm
HumanIntentionalPost-deployment
View all 45 risks from this paper →