CompTIA · SecAI+ CY0-001
AI threat-modeling resources
SecAI+ CY0-001 · Lesson 5 of 18 · 38:46
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the CompTIA SecAI+ CY0-001 exam. In this lesson: the OWASP Top 10 for LLM Applications (2023 names in the objectives, 2025 version) and the OWASP Machine Learning Security Top 10, MITRE ATLAS, the MIT AI Risk Repository, the CVE program's AI working group, and threat-modeling frameworks like STRIDE, PASTA, and attack trees, with Fernhill Telecom as the running example. Includes three original practice questions.
Preview the topics
- Fernhill’s red team wants to describe an attack on the support assistant step by step, as adversary tactics and techniques, with real case studies to compare. Which resource fits best?
- A review asks whether users of the assistant could deny actions that they took, or act with an administrator’s rights. Which framework names these threats repudiation and elevation of privilege?
- A risk assessment of Fernhill’s assistant covered every technical attack, but missed the harm of giving customers false information about their contracts. Which resource helps check that no whole category of harm is missed?