PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Operationalizing Gartner TRiSM: Testing AI for Trust, Risk, and Security

hackerone.com | blog | #ai-security | #ai-governance | #prompt-injection | #risk-management | #adversarial-testing | #gartner-trism
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Most AI incidents stem from misalignment and internal misuse rather than attacks. HackerOne maps adversarial testing to Gartner TRiSM pillars—trust, risk, security—to validate AI controls.
Published
Collected

Related coverage

blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · hackerone.com
CTEM for Enterprise: Scaling Continuous Exposure Management Across Complex Environments
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · hackerone.com
HackerOne Champion of the Quarter: monday.com's Amit Levy on Thinking Like an Attacker to Defend Like a Pro
monday.com's AppSec lead Amit Levy explains how embedding adversarial testing into the SDLC and thinking like an attacker transformed his team's posture and earned genuine engineering buy-in.
blog · hackerone.com
The UK’s AI Cyber Security Code of Practice: What It Means for Your Business
The UK's AI Cyber Security Code of Practice sets 13 baseline principles across the AI lifecycle, covering supply chain security and adversarial testing, and is expected to shape ETSI standards.
blog · bishopfox.com
Adversarial Controls Testing: A Step to Cybersecurity Resilience
Bishop Fox introduces Adversarial Controls Testing: instead of reviewing configs, ACT simulates MITRE ATT&CK-mapped TTPs to measure whether email, endpoint and network controls detect and respond.
blog · xbow.com
How Attackers Are Using AI & What Defenders Must Do
Attackers are running AI driven attack chains from recon to exploitation in minutes. Here’s what actually changed, and why defenders need AI pentesting to keep pace.
Back