{"id":"https://openalex.org/W4295087958","doi":"https://doi.org/10.3390/s22176662","title":"Modeling Threats to AI-ML Systems Using STRIDE","display_name":"Modeling Threats to AI-ML Systems Using STRIDE","publication_year":2022,"publication_date":"2022-09-03","ids":{"openalex":"https://openalex.org/W4295087958","doi":"https://doi.org/10.3390/s22176662","pmid":"https://pubmed.ncbi.nlm.nih.gov/36081121"},"language":"en","primary_location":{"id":"doi:10.3390/s22176662","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s22176662","pdf_url":"https://www.mdpi.com/1424-8220/22/17/6662/pdf?version=1662371369","source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj","pubmed"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/1424-8220/22/17/6662/pdf?version=1662371369","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5058810729","display_name":"Lara Mauri","orcid":"https://orcid.org/0000-0002-4024-1015"},"institutions":[{"id":"https://openalex.org/I189158943","display_name":"University of Milan","ror":"https://ror.org/00wjc7c48","country_code":"IT","type":"education","lineage":["https://openalex.org/I189158943"]}],"countries":["IT"],"is_corresponding":true,"raw_author_name":"Lara Mauri","raw_affiliation_strings":["Department of Computer Science, Universit\u00e0 Degli Studi di Milano, 20133 Milan, Italy"],"raw_orcid":"https://orcid.org/0000-0002-4024-1015","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Universit\u00e0 Degli Studi di Milano, 20133 Milan, Italy","institution_ids":["https://openalex.org/I189158943"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5075830877","display_name":"Ernesto Damiani","orcid":"https://orcid.org/0000-0002-9557-6496"},"institutions":[{"id":"https://openalex.org/I176601375","display_name":"Khalifa University of Science and Technology","ror":"https://ror.org/05hffr360","country_code":"AE","type":"education","lineage":["https://openalex.org/I176601375"]},{"id":"https://openalex.org/I189158943","display_name":"University of Milan","ror":"https://ror.org/00wjc7c48","country_code":"IT","type":"education","lineage":["https://openalex.org/I189158943"]}],"countries":["AE","IT"],"is_corresponding":false,"raw_author_name":"Ernesto Damiani","raw_affiliation_strings":["Center for Cyber-Physical Systems, Khalifa University of Science and Technology, Abu Dhabi 127788, United Arab Emirates","Department of Computer Science, Universit\u00e0 Degli Studi di Milano, 20133 Milan, Italy"],"raw_orcid":"https://orcid.org/0000-0002-9557-6496","affiliations":[{"raw_affiliation_string":"Center for Cyber-Physical Systems, Khalifa University of Science and Technology, Abu Dhabi 127788, United Arab Emirates","institution_ids":["https://openalex.org/I176601375"]},{"raw_affiliation_string":"Department of Computer Science, Universit\u00e0 Degli Studi di Milano, 20133 Milan, Italy","institution_ids":["https://openalex.org/I189158943"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5058810729"],"corresponding_institution_ids":["https://openalex.org/I189158943"],"apc_list":{"value":2400,"currency":"CHF","value_usd":2598},"apc_paid":{"value":2230,"currency":"EUR","value_usd":2405},"fwci":5.2485,"has_fulltext":false,"cited_by_count":50,"citation_normalized_percentile":{"value":0.96147234,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":"22","issue":"17","first_page":"6662","last_page":"6662"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9954000115394592,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7194207906723022},{"id":"https://openalex.org/keywords/stride","display_name":"STRIDE","score":0.6065689921379089},{"id":"https://openalex.org/keywords/security-domain","display_name":"Security domain","score":0.5767912864685059},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.538460910320282},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5269119143486023},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.5146616101264954},{"id":"https://openalex.org/keywords/asset","display_name":"Asset (computer security)","score":0.5020482540130615},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5005114078521729},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.498720645904541},{"id":"https://openalex.org/keywords/subject-matter-expert","display_name":"Subject-matter expert","score":0.4435182809829712},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.38006123900413513},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.3341740369796753},{"id":"https://openalex.org/keywords/expert-system","display_name":"Expert system","score":0.17427149415016174}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7194207906723022},{"id":"https://openalex.org/C18007350","wikidata":"https://www.wikidata.org/wiki/Q7394815","display_name":"STRIDE","level":2,"score":0.6065689921379089},{"id":"https://openalex.org/C2780264999","wikidata":"https://www.wikidata.org/wiki/Q7445032","display_name":"Security domain","level":2,"score":0.5767912864685059},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.538460910320282},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5269119143486023},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.5146616101264954},{"id":"https://openalex.org/C76178495","wikidata":"https://www.wikidata.org/wiki/Q4808784","display_name":"Asset (computer security)","level":2,"score":0.5020482540130615},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5005114078521729},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.498720645904541},{"id":"https://openalex.org/C105002631","wikidata":"https://www.wikidata.org/wiki/Q4833645","display_name":"Subject-matter expert","level":3,"score":0.4435182809829712},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.38006123900413513},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3341740369796753},{"id":"https://openalex.org/C58328972","wikidata":"https://www.wikidata.org/wiki/Q184609","display_name":"Expert system","level":2,"score":0.17427149415016174},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[{"descriptor_ui":"D000069550","descriptor_name":"Machine Learning","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D000069550","descriptor_name":"Machine Learning","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D000069550","descriptor_name":"Machine Learning","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D001185","descriptor_name":"Artificial Intelligence","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D001185","descriptor_name":"Artificial Intelligence","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D001185","descriptor_name":"Artificial Intelligence","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true}],"locations_count":6,"locations":[{"id":"doi:10.3390/s22176662","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s22176662","pdf_url":"https://www.mdpi.com/1424-8220/22/17/6662/pdf?version=1662371369","source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},{"id":"pmid:36081121","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/36081121","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors (Basel, Switzerland)","raw_type":null},{"id":"pmh:oai:air.unimi.it:2434/937447","is_oa":true,"landing_page_url":"http://hdl.handle.net/2434/937447","pdf_url":null,"source":{"id":"https://openalex.org/S4306400516","display_name":"Archivio Istituzionale della Ricerca (Universita Degli Studi Di Milano)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I189158943","host_organization_name":"University of Milan","host_organization_lineage":["https://openalex.org/I189158943"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:doaj.org/article:2985dcbe01eb4a51a3b1bf0d10d1e904","is_oa":true,"landing_page_url":"https://doaj.org/article/2985dcbe01eb4a51a3b1bf0d10d1e904","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Sensors, Vol 22, Iss 17, p 6662 (2022)","raw_type":"article"},{"id":"pmh:oai:mdpi.com:/1424-8220/22/17/6662/","is_oa":true,"landing_page_url":"https://dx.doi.org/10.3390/s22176662","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Sensors; Volume 22; Issue 17; Pages: 6662","raw_type":"Text"},{"id":"pmh:oai:pubmedcentral.nih.gov:9459912","is_oa":true,"landing_page_url":"https://www.ncbi.nlm.nih.gov/pmc/articles/9459912","pdf_url":null,"source":{"id":"https://openalex.org/S2764455111","display_name":"PubMed Central","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Sensors (Basel)","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.3390/s22176662","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s22176662","pdf_url":"https://www.mdpi.com/1424-8220/22/17/6662/pdf?version=1662371369","source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.5600000023841858,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4295087958.pdf"},"referenced_works_count":57,"referenced_works":["https://openalex.org/W597610461","https://openalex.org/W1525753916","https://openalex.org/W1648834017","https://openalex.org/W1932198206","https://openalex.org/W2046835320","https://openalex.org/W2093649824","https://openalex.org/W2095577883","https://openalex.org/W2108816886","https://openalex.org/W2125908420","https://openalex.org/W2133583143","https://openalex.org/W2151298633","https://openalex.org/W2205725565","https://openalex.org/W2528881748","https://openalex.org/W2572504188","https://openalex.org/W2610321374","https://openalex.org/W2614268818","https://openalex.org/W2694044524","https://openalex.org/W2728688086","https://openalex.org/W2759273942","https://openalex.org/W2763152536","https://openalex.org/W2767983543","https://openalex.org/W2778689919","https://openalex.org/W2804342109","https://openalex.org/W2806594193","https://openalex.org/W2893590001","https://openalex.org/W2896069478","https://openalex.org/W2902881353","https://openalex.org/W2906560692","https://openalex.org/W2963178695","https://openalex.org/W2963844355","https://openalex.org/W2982669769","https://openalex.org/W2992884799","https://openalex.org/W3023326764","https://openalex.org/W3116308504","https://openalex.org/W3116410977","https://openalex.org/W3126600141","https://openalex.org/W3131341263","https://openalex.org/W3135250661","https://openalex.org/W3159295158","https://openalex.org/W3163963286","https://openalex.org/W3198181512","https://openalex.org/W3211490561","https://openalex.org/W3213748123","https://openalex.org/W4200470330","https://openalex.org/W4211223593","https://openalex.org/W4220907003","https://openalex.org/W4236189545","https://openalex.org/W4244983850","https://openalex.org/W4247200422","https://openalex.org/W4288079611","https://openalex.org/W6618119023","https://openalex.org/W6728399322","https://openalex.org/W6744384640","https://openalex.org/W6744973017","https://openalex.org/W6746010166","https://openalex.org/W6758947373","https://openalex.org/W6805115832"],"related_works":["https://openalex.org/W2347597433","https://openalex.org/W2389023277","https://openalex.org/W2562411628","https://openalex.org/W3034772098","https://openalex.org/W2100563491","https://openalex.org/W2124672917","https://openalex.org/W4289821489","https://openalex.org/W4297820790","https://openalex.org/W4283687120","https://openalex.org/W3198181512"],"abstract_inverted_index":{"The":[0,163],"application":[1],"of":[2,31,76,96,112,133,187],"emerging":[3],"technologies,":[4],"such":[5],"as":[6],"Artificial":[7],"Intelligence":[8],"(AI),":[9],"entails":[10],"risks":[11],"that":[12,44],"need":[13,61],"to":[14,17,62,70,118,123,144,154,177],"be":[15],"addressed":[16],"ensure":[18],"secure":[19],"and":[20,94,128,156],"trustworthy":[21],"socio-technical":[22],"infrastructures.":[23],"Machine":[24],"Learning":[25],"(ML),":[26],"the":[27,60,71,87,92,110,120,134,145,172,185,194],"most":[28,173],"developed":[29],"subfield":[30],"AI,":[32],"allows":[33],"for":[34,86],"improved":[35],"decision-making":[36],"processes.":[37],"However,":[38],"ML":[39,55,89,99,135,151,168,179],"models":[40],"exhibit":[41],"specific":[42,72],"vulnerabilities":[43],"conventional":[45],"IT":[46],"systems":[47,53],"are":[48],"not":[49],"subject":[50],"to.":[51],"As":[52],"incorporating":[54],"components":[56],"become":[57],"increasingly":[58],"pervasive,":[59],"provide":[63],"security":[64,111,157,175],"practitioners":[65,169],"with":[66,184],"threat":[67],"modeling":[68],"tailored":[69],"AI-ML":[73,146],"pipeline":[74],"is":[75],"paramount":[77],"importance.":[78],"Currently,":[79],"there":[80],"exist":[81],"no":[82],"well-established":[83],"approach":[84,143],"accounting":[85],"entire":[88],"life-cycle":[90,136],"in":[91,170],"identification":[93],"analysis":[95],"threats":[97,155,160],"targeting":[98],"techniques.":[100],"In":[101],"this":[102],"paper,":[103],"we":[104,148],"propose":[105],"an":[106],"asset-centered":[107],"methodology\u2014STRIDE-AI\u2014for":[108],"assessing":[109],"AI-ML-based":[113],"systems.":[114],"We":[115,181],"discuss":[116],"how":[117,125],"apply":[119],"FMEA":[121],"process":[122],"identify":[124],"assets":[126],"generated":[127],"used":[129],"at":[130],"different":[131],"stages":[132],"may":[137,161],"fail.":[138],"By":[139],"adapting":[140],"Microsoft\u2019s":[141],"STRIDE":[142],"domain,":[147],"map":[149],"potential":[150],"failure":[152],"modes":[153],"properties":[158],"these":[159],"endanger.":[162],"proposed":[164],"methodology":[165],"can":[166],"assist":[167],"choosing":[171],"effective":[174],"controls":[176],"protect":[178],"assets.":[180],"illustrate":[182],"STRIDE-AI":[183],"help":[186],"a":[188],"real-world":[189],"use":[190],"case":[191],"selected":[192],"from":[193],"TOREADOR":[195],"H2020":[196],"project.":[197]},"counts_by_year":[{"year":2026,"cited_by_count":10},{"year":2025,"cited_by_count":14},{"year":2024,"cited_by_count":13},{"year":2023,"cited_by_count":11},{"year":2022,"cited_by_count":2}],"updated_date":"2026-05-22T06:13:13.366637","created_date":"2025-10-10T00:00:00"}