A cybersecurity risk analysis framework for systems with artificial intelligence components
Jose Manuel Camacho, Aitor Couce‐Vieira, David Arroyo, David Rı́os Insua
Abstract
Abstract The introduction of the European Union Artificial Intelligence (AI) Act, the NIST AI Risk Management Framework, and related international norms and policy documents demand a better understanding and implementation of novel risk analysis issues when facing systems with AI components: dealing with new AI‐related impacts; incorporating AI‐based assets within the cyber architecture; considering AI‐based security and recovery controls within the cybersecurity portfolio; and managing novel AI‐based targeted attacks. This paper suggests solutions to such issues and integrates them within a broad novel framework to support risk analysis in systems with AI components and services. An example concerning automated driving systems illustrates the framework validating it conceptually.