Skip to main content
This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
MIT AI Risk Initiative
BackAI-based tools attacking critical infrastructure
Damage to critical infrastructure
Critical infrastructure component failur…

AI-based tools attacking critical infrastructure

Risk Sources and Risk Management Measures in Support of Standards for General-Purpose AI Systems

Gipiškis et al. (2024)

SourceDOI
Sub-category
Risk Domain
4Malicious Actors & Misuse
4.2Cyberattacks, weapon development or use, and mass harm

Using AI systems to develop cyber weapons (e.g., by coding cheaper, more effective malware), develop new or enhance existing weapons (e.g., Lethal Autonomous Weapons or chemical, biological, radiological, nuclear, and high-yield explosives), or use weapons to cause mass harm.

"Critical infrastructure can also be damaged without AI integration, for instance, when AI-based tools are used indirectly to aid actions such as in coordinated power outages caused by large-scale user manipulation [159]."(p. 46)

Entity: Who or what caused the harm

Human

Due to a decision or action made by humans

AI system

Due to a decision or action made by an AI system

Other

Due to some other reason or is ambiguous

Intent: Whether the harm was intentional or accidental

Intentional

Due to an expected outcome from pursuing a goal

Unintentional

Due to an unexpected outcome from pursuing a goal

Other

Without clearly specifying the intentionality

Timing: Whether the risk is pre- or post-deployment

Pre-deployment

Occurring before the AI is deployed

Post-deployment

Occurring after the AI model has been trained and deployed

Other

Without a clearly specified time of occurrence

Other risks from Gipiškis et al. (2024) (144)

Direct Harm Domains (content safety harms)

1.2 Exposure to toxic content
Not codedNot codedNot coded

Direct Harm Domains (content safety harms) > Violence and extremism

1.2 Exposure to toxic content
Not codedNot codedNot coded

Direct Harm Domains (content safety harms) > Hate and toxicity

1.2 Exposure to toxic content
Not codedNot codedNot coded

Direct Harm Domains (content safety harms) > Sexual content

1.2 Exposure to toxic content
Not codedNot codedNot coded

Direct Harm Domains (content safety harms) > Child harm

1.2 Exposure to toxic content
Not codedNot codedNot coded

Direct Harm Domains (content safety harms) > Self-harm

1.2 Exposure to toxic content
Not codedNot codedNot coded
View all 144 risks from this paper →