From 61b51966f35f3806e256385489a90f252b8ce30d Mon Sep 17 00:00:00 2001 From: Shain Singh Date: Mon, 30 Oct 2023 15:40:17 +1100 Subject: [PATCH 1/8] feat: create example cheatsheet reference for ML01 --- ...23-Input_Manipulation_Attack-Cheatsheet.md | 27 +++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md diff --git a/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md b/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md new file mode 100644 index 0000000..5af8f35 --- /dev/null +++ b/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md @@ -0,0 +1,27 @@ +--- +layout: col-sidebar +type: documentation +altfooter: true +level: 4 +auto-migrated: 0 +document: OWASP Machine Learning Security Top Ten 2023 +year: 2023 +order: 1 +title: ML01:2023 Input Manipulation Attack - Cheatsheet +lang: en +tags: + [ + OWASP Machine Learning Security Top Ten 2023, + Top Ten, + ML01:2023, + mltop10, + mlsectop10, + cheatsheets + ] +--- + +## Cheatsheets + +* [Input Validation](https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html) +* [Injection Prevention](https://cheatsheetseries.owasp.org/cheatsheets/Injection_Prevention_Cheat_Sheet.html) + From 5a847606e228b283db16e4ae666b921e920d29aa Mon Sep 17 00:00:00 2001 From: Shain Singh Date: Mon, 30 Oct 2023 15:52:39 +1100 Subject: [PATCH 2/8] fix: update cheatsheet for ML01 --- ...23-Input_Manipulation_Attack-Cheatsheet.md | 29 ++----------------- 1 file changed, 3 insertions(+), 26 deletions(-) diff --git a/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md b/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md index 5af8f35..72114a4 100644 --- a/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md +++ b/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md @@ -1,27 +1,4 @@ ---- -layout: col-sidebar -type: documentation -altfooter: true -level: 4 -auto-migrated: 0 -document: OWASP Machine Learning Security Top Ten 2023 -year: 2023 -order: 1 -title: ML01:2023 Input Manipulation Attack - Cheatsheet -lang: en -tags: - [ - OWASP Machine Learning Security Top Ten 2023, - Top Ten, - ML01:2023, - mltop10, - mlsectop10, - cheatsheets - ] ---- - -## Cheatsheets - -* [Input Validation](https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html) -* [Injection Prevention](https://cheatsheetseries.owasp.org/cheatsheets/Injection_Prevention_Cheat_Sheet.html) +## ML01:2023 Input Manipulation Attack - Cheatsheets +- [Input Validation](https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html) +- [Injection Prevention](https://cheatsheetseries.owasp.org/cheatsheets/Injection_Prevention_Cheat_Sheet.html) From 20c2f5a5243e6baea69ce5bb585e08c0f8b0fd0a Mon Sep 17 00:00:00 2001 From: Shain Singh Date: Mon, 30 Oct 2023 16:47:00 +1100 Subject: [PATCH 3/8] merge: develop (#160) * feat: create example cheatsheet reference for ML01 * fix: update cheatsheet for ML01 --------- Signed-off-by: Shain Singh Co-authored-by: Sagar Bhure From 89aa0f723f1151e07a4efacdc5ec636a09d0204a Mon Sep 17 00:00:00 2001 From: Shain Singh Date: Mon, 30 Oct 2023 16:51:46 +1100 Subject: [PATCH 4/8] chore: archive gh issues --- issues/2023-04-27.2.issue.open.md | 35 + issues/2023-05-22.3.pr.closed.md | 4 +- issues/2023-07-24.15.issue.open.md | 2 +- issues/2023-07-24.16.issue.closed.md | 2 +- issues/2023-07-24.22.pr.merged.md | 2 +- issues/2023-07-25.29.issue.closed.md | 4 +- issues/2023-07-25.30.issue.open.md | 2 +- issues/2023-07-25.31.pr.merged.md | 6 +- issues/2023-07-27.32.pr.merged.md | 2 +- issues/2023-07-27.35.pr.merged.md | 2 +- issues/2023-07-28.40.pr.merged.md | 2 +- ....open.md => 2023-08-02.43.issue.closed.md} | 10 +- issues/2023-08-03.44.issue.closed.md | 2 +- issues/2023-08-03.46.issue.closed.md | 2 +- issues/2023-08-03.47.pr.closed.md | 4 +- issues/2023-08-09.56.issue.closed.md | 2 +- issues/2023-08-20.92.issue.closed.md | 2 +- issues/2023-08-24.96.issue.closed.md | 2 +- issues/2023-08-24.99.issue.open.md | 2 +- issues/2023-08-25.100.pr.closed.md | 2 +- issues/2023-08-25.101.pr.merged.md | 2 +- ...open.md => 2023-09-05.105.issue.closed.md} | 4 +- issues/2023-09-05.106.issue.closed.md | 2 +- issues/2023-09-08.113.issue.open.md | 2 + issues/2023-09-26.116.issue.closed.md | 2 +- issues/2023-09-29.118.pr.merged.md | 14 + issues/2023-09-29.119.pr.closed.md | 23 + issues/2023-10-04.120.pr.merged.md | 14 + issues/2023-10-05.121.issue.closed.md | 27 + issues/2023-10-06.123.issue.closed.md | 34 + issues/2023-10-09.124.pr.closed.md | 19 + issues/2023-10-09.125.issue.closed.md | 26 + issues/2023-10-18.126.pr.merged.md | 14 + issues/2023-10-18.127.pr.closed.md | 14 + issues/2023-10-20.128.issue.open.md | 24 + issues/2023-10-20.129.pr.open.md | 40 ++ issues/2023-10-30.130.issue.open.md | 20 + issues/2023-10-30.131.issue.open.md | 20 + issues/2023-10-30.132.issue.open.md | 20 + issues/2023-10-30.133.issue.open.md | 20 + issues/2023-10-30.134.issue.open.md | 20 + issues/2023-10-30.135.issue.open.md | 20 + issues/2023-10-30.136.issue.open.md | 19 + issues/2023-10-30.137.issue.open.md | 18 + issues/2023-10-30.138.issue.open.md | 18 + issues/2023-10-30.139.issue.open.md | 18 + issues/2023-10-30.140.issue.open.md | 18 + issues/2023-10-30.141.issue.open.md | 18 + issues/2023-10-30.142.issue.open.md | 18 + issues/2023-10-30.143.issue.open.md | 18 + issues/2023-10-30.144.issue.open.md | 18 + issues/2023-10-30.145.issue.open.md | 18 + issues/2023-10-30.146.issue.closed.md | 34 + issues/2023-10-30.147.issue.open.md | 25 + issues/2023-10-30.148.pr.merged.md | 14 + issues/2023-10-30.149.pr.merged.md | 16 + issues/2023-10-30.150.issue.open.md | 23 + issues/2023-10-30.151.issue.open.md | 23 + issues/2023-10-30.152.issue.open.md | 23 + issues/2023-10-30.153.issue.open.md | 23 + issues/2023-10-30.154.issue.open.md | 23 + issues/2023-10-30.155.issue.open.md | 23 + issues/2023-10-30.156.issue.open.md | 23 + issues/2023-10-30.157.issue.open.md | 23 + issues/2023-10-30.158.issue.open.md | 23 + issues/2023-10-30.159.issue.open.md | 17 + issues/2023-10-30.160.pr.merged.md | 14 + open-issues.md | 626 ++++++++++++++++-- 68 files changed, 1517 insertions(+), 89 deletions(-) rename issues/{2023-08-02.43.issue.open.md => 2023-08-02.43.issue.closed.md} (84%) rename issues/{2023-09-05.105.issue.open.md => 2023-09-05.105.issue.closed.md} (76%) create mode 100644 issues/2023-09-29.118.pr.merged.md create mode 100644 issues/2023-09-29.119.pr.closed.md create mode 100644 issues/2023-10-04.120.pr.merged.md create mode 100644 issues/2023-10-05.121.issue.closed.md create mode 100644 issues/2023-10-06.123.issue.closed.md create mode 100644 issues/2023-10-09.124.pr.closed.md create mode 100644 issues/2023-10-09.125.issue.closed.md create mode 100644 issues/2023-10-18.126.pr.merged.md create mode 100644 issues/2023-10-18.127.pr.closed.md create mode 100644 issues/2023-10-20.128.issue.open.md create mode 100644 issues/2023-10-20.129.pr.open.md create mode 100644 issues/2023-10-30.130.issue.open.md create mode 100644 issues/2023-10-30.131.issue.open.md create mode 100644 issues/2023-10-30.132.issue.open.md create mode 100644 issues/2023-10-30.133.issue.open.md create mode 100644 issues/2023-10-30.134.issue.open.md create mode 100644 issues/2023-10-30.135.issue.open.md create mode 100644 issues/2023-10-30.136.issue.open.md create mode 100644 issues/2023-10-30.137.issue.open.md create mode 100644 issues/2023-10-30.138.issue.open.md create mode 100644 issues/2023-10-30.139.issue.open.md create mode 100644 issues/2023-10-30.140.issue.open.md create mode 100644 issues/2023-10-30.141.issue.open.md create mode 100644 issues/2023-10-30.142.issue.open.md create mode 100644 issues/2023-10-30.143.issue.open.md create mode 100644 issues/2023-10-30.144.issue.open.md create mode 100644 issues/2023-10-30.145.issue.open.md create mode 100644 issues/2023-10-30.146.issue.closed.md create mode 100644 issues/2023-10-30.147.issue.open.md create mode 100644 issues/2023-10-30.148.pr.merged.md create mode 100644 issues/2023-10-30.149.pr.merged.md create mode 100644 issues/2023-10-30.150.issue.open.md create mode 100644 issues/2023-10-30.151.issue.open.md create mode 100644 issues/2023-10-30.152.issue.open.md create mode 100644 issues/2023-10-30.153.issue.open.md create mode 100644 issues/2023-10-30.154.issue.open.md create mode 100644 issues/2023-10-30.155.issue.open.md create mode 100644 issues/2023-10-30.156.issue.open.md create mode 100644 issues/2023-10-30.157.issue.open.md create mode 100644 issues/2023-10-30.158.issue.open.md create mode 100644 issues/2023-10-30.159.issue.open.md create mode 100644 issues/2023-10-30.160.pr.merged.md diff --git a/issues/2023-04-27.2.issue.open.md b/issues/2023-04-27.2.issue.open.md index 9aa6ff6..2151567 100644 --- a/issues/2023-04-27.2.issue.open.md +++ b/issues/2023-04-27.2.issue.open.md @@ -36,7 +36,42 @@ Isn’t model skewing the same as data poisoning? If there’s a difference, to 8 ML10 is called Neural net reprogramming but I guess the attack of changing parameters will work on any type of algorithm - not just neural networks. The description also mentions changing the training data, but perhaps that is better left out to avoid confusion with data poisoning? +#### [shsingh](https://github.com/shsingh) commented at [2023-09-29 00:13](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/2#issuecomment-1740146868): +>1. +>ML01 +>In 'literature' the term ‘adversarial’ is often used for input manipulation attacks, but also for data poisoning, model >extraction etc. Therefore in order to avoid confusion it is probably better to rename the ML01 adversarial attack entry to >input manipulation? + +addressed in : #110 + +2. +It is worth considering to add ‘model evasion’ aka black box input manipulation to your top 10? Or do you prefer to have one entry for input manipulation all together? + +3. +ML03 +It is not clear to me how scenarios 1 and 2 work. I must be missing something. Usually model inversion is explained by manipulating synthesized faces until the algorithm behaves like it recognizes the face. + +4 +ML04 +It is not clear to me how scenario 1 works. +Standard methods against overtraining are missing form the ‘how to prevent’ part. Instead the advice is to reduce the training set size - which typically increases the overfitting problem. + +5 +ML05 +Model stealing describes a scenario where an attacker steals model parameters, but generally this attack takes place by ways of black box: gathering input-output pairs and training a new model on it. + +6 +ML07 +I don’t understand exactly how the presented scenario should work. I do know about the scenario where a pre-trained model was obtained that has been altered by an attacker. This matches the description. + +7 +ML08 +Isn’t model skewing the same as data poisoning? If there’s a difference, to me they are not apparent from the scenario and description. + +>8 +>ML10 is called Neural net reprogramming but I guess the attack of changing parameters will work on any type of algorithm >- not just neural networks. The description also mentions changing the training data, but perhaps that is better left out to >avoid confusion with data poisoning? + +addressed in: #104 ------------------------------------------------------------------------------- diff --git a/issues/2023-05-22.3.pr.closed.md b/issues/2023-05-22.3.pr.closed.md index b1dee87..b150e8a 100644 --- a/issues/2023-05-22.3.pr.closed.md +++ b/issues/2023-05-22.3.pr.closed.md @@ -1,6 +1,6 @@ # [\#3 PR](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/3) `closed`: Fix: Add metadata for UI aesthetics -#### [msnishanth9001](https://github.com/msnishanth9001) opened issue at [2023-05-22 11:25](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/3): +#### [msnishanth9001](https://github.com/msnishanth9001) opened issue at [2023-05-22 11:25](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/3): > Fixed UI aesthetic. > Fixed Table Layout for ML01 Scenario. @@ -9,7 +9,7 @@ Please add description, in regard with the files changed -#### [msnishanth9001](https://github.com/msnishanth9001) commented at [2023-05-22 11:41](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/3#issuecomment-1557067071): +#### [msnishanth9001](https://github.com/msnishanth9001) commented at [2023-05-22 11:41](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/3#issuecomment-1557067071): [deployment link](https://msnishanth9001.github.io/www-project-machine-learning-security-top-10/) diff --git a/issues/2023-07-24.15.issue.open.md b/issues/2023-07-24.15.issue.open.md index fb90e41..6859187 100644 --- a/issues/2023-07-24.15.issue.open.md +++ b/issues/2023-07-24.15.issue.open.md @@ -1,5 +1,5 @@ # [\#15 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/15) `open`: feat(docs): create page on calculating severity -**Labels**: `documentation`, `enhancement`, `help wanted` +**Labels**: `documentation/general`, `enhancement`, `help wanted` #### [shsingh](https://github.com/shsingh) opened issue at [2023-07-24 00:16](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/15): diff --git a/issues/2023-07-24.16.issue.closed.md b/issues/2023-07-24.16.issue.closed.md index a53c8fd..c2a45e7 100644 --- a/issues/2023-07-24.16.issue.closed.md +++ b/issues/2023-07-24.16.issue.closed.md @@ -1,5 +1,5 @@ # [\#16 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/16) `closed`: feat(docs): create a GLOSSARY.md -**Labels**: `documentation`, `enhancement`, `help wanted` +**Labels**: `documentation/general`, `enhancement`, `help wanted` #### [shsingh](https://github.com/shsingh) opened issue at [2023-07-24 00:19](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/16): diff --git a/issues/2023-07-24.22.pr.merged.md b/issues/2023-07-24.22.pr.merged.md index c0a760c..7985c98 100644 --- a/issues/2023-07-24.22.pr.merged.md +++ b/issues/2023-07-24.22.pr.merged.md @@ -1,5 +1,5 @@ # [\#22 PR](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/22) `merged`: Merge: Branch shsingh/update-README into master -**Labels**: `documentation`, `issues/admin` +**Labels**: `documentation/general`, `issues/admin` #### [shsingh](https://github.com/shsingh) opened issue at [2023-07-24 08:06](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/22): diff --git a/issues/2023-07-25.29.issue.closed.md b/issues/2023-07-25.29.issue.closed.md index eb0f2cd..15335ea 100644 --- a/issues/2023-07-25.29.issue.closed.md +++ b/issues/2023-07-25.29.issue.closed.md @@ -1,5 +1,5 @@ # [\#29 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/29) `closed`: add: Create a RELATED.md to list similar projects and SIGs -**Labels**: `documentation`, `good first issue` +**Labels**: `documentation/general`, `good first issue` #### [shsingh](https://github.com/shsingh) opened issue at [2023-07-25 04:28](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/29): @@ -20,7 +20,7 @@ This applies to both the website and documentation content. - [X] I agree to follow this project's Code of Conduct -#### [mik0w](https://github.com/mik0w) commented at [2023-07-25 10:06](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/29#issuecomment-1649523676): +#### [mik0w](https://github.com/mik0w) commented at [2023-07-25 10:06](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/29#issuecomment-1649523676): Hello, I've created a PR: https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/31 diff --git a/issues/2023-07-25.30.issue.open.md b/issues/2023-07-25.30.issue.open.md index 8c9140c..1b07dc5 100644 --- a/issues/2023-07-25.30.issue.open.md +++ b/issues/2023-07-25.30.issue.open.md @@ -1,5 +1,5 @@ # [\#30 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/30) `open`: fix: merge existing body of work from EthicalML https://ethical.institute -**Labels**: `issues/general`, `good first issue`, `issues/triage` +**Labels**: `good first issue`, `issues/triage` #### [shsingh](https://github.com/shsingh) opened issue at [2023-07-25 04:39](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/30): diff --git a/issues/2023-07-25.31.pr.merged.md b/issues/2023-07-25.31.pr.merged.md index a25674b..3e4a07c 100644 --- a/issues/2023-07-25.31.pr.merged.md +++ b/issues/2023-07-25.31.pr.merged.md @@ -1,8 +1,8 @@ # [\#31 PR](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/31) `merged`: Issue #29: Create a RELATED.md to list similar projects and SIGs -**Labels**: `documentation` +**Labels**: `documentation/general` -#### [mik0w](https://github.com/mik0w) opened issue at [2023-07-25 10:05](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/31): +#### [mik0w](https://github.com/mik0w) opened issue at [2023-07-25 10:05](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/31): Hello, I've created a list of projects and SIGs similar to OWASP Top10 for ML Security. I don't know what is a suggested format, but I think I've included the most renowned resources regarding AI/ML security. @@ -18,7 +18,7 @@ This would help to unify the effort of all the initiatives and mapping it to res Open to suggestions. -#### [mik0w](https://github.com/mik0w) commented at [2023-07-25 10:25](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/31#issuecomment-1649554009): +#### [mik0w](https://github.com/mik0w) commented at [2023-07-25 10:25](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/31#issuecomment-1649554009): @sagarbhure Thanks for suggestions - I will update this PR later :) diff --git a/issues/2023-07-27.32.pr.merged.md b/issues/2023-07-27.32.pr.merged.md index 36fde34..e4a3a47 100644 --- a/issues/2023-07-27.32.pr.merged.md +++ b/issues/2023-07-27.32.pr.merged.md @@ -1,5 +1,5 @@ # [\#32 PR](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/32) `merged`: merge: branch 'develop' into master -**Labels**: `documentation`, `enhancement` +**Labels**: `documentation/general`, `enhancement` #### [shsingh](https://github.com/shsingh) opened issue at [2023-07-27 04:32](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/32): diff --git a/issues/2023-07-27.35.pr.merged.md b/issues/2023-07-27.35.pr.merged.md index 9ba3fb8..871b9a1 100644 --- a/issues/2023-07-27.35.pr.merged.md +++ b/issues/2023-07-27.35.pr.merged.md @@ -1,5 +1,5 @@ # [\#35 PR](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/35) `merged`: add: fix website -**Labels**: `documentation`, `issues/admin` +**Labels**: `documentation/general`, `issues/admin` #### [shsingh](https://github.com/shsingh) opened issue at [2023-07-27 09:25](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/35): diff --git a/issues/2023-07-28.40.pr.merged.md b/issues/2023-07-28.40.pr.merged.md index dd70bd3..3c3759f 100644 --- a/issues/2023-07-28.40.pr.merged.md +++ b/issues/2023-07-28.40.pr.merged.md @@ -1,6 +1,6 @@ # [\#40 PR](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/40) `merged`: #29: update of RELATED.md -#### [mik0w](https://github.com/mik0w) opened issue at [2023-07-28 10:21](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/40): +#### [mik0w](https://github.com/mik0w) opened issue at [2023-07-28 10:21](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/40): I've updated RELATED.md - I've added some more resources, categorized them and created a brief description of each of the categories of resources. diff --git a/issues/2023-08-02.43.issue.open.md b/issues/2023-08-02.43.issue.closed.md similarity index 84% rename from issues/2023-08-02.43.issue.open.md rename to issues/2023-08-02.43.issue.closed.md index 1b103ee..6471b89 100644 --- a/issues/2023-08-02.43.issue.open.md +++ b/issues/2023-08-02.43.issue.closed.md @@ -1,5 +1,5 @@ -# [\#43 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/43) `open`: feat(docs): create a set of guidelines for how to use the Top 10 list -**Labels**: `documentation`, `enhancement`, `help wanted` +# [\#43 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/43) `closed`: feat(docs): create a set of guidelines for how to use the Top 10 list +**Labels**: `documentation/general`, `enhancement`, `help wanted` #### [shsingh](https://github.com/shsingh) opened issue at [2023-08-02 14:02](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/43): @@ -38,6 +38,12 @@ The analogy provided about the guideline is akin to a traffic police officer dir More analogies ? Would love to see if you are open on contributing to this mission. +#### [shsingh](https://github.com/shsingh) commented at [2023-10-30 01:59](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/43#issuecomment-1784359503): + +Hi @mik0w thanks for your initial work on getting a draft page up for [guidelines](https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/GUIDELINES.md) + +I've broken down each role into a separate task to allow those with expertise in each role to provide feedback and contribute. This means we will have a document for each type of role mentioned. + ------------------------------------------------------------------------------- diff --git a/issues/2023-08-03.44.issue.closed.md b/issues/2023-08-03.44.issue.closed.md index 026474f..8cec9b5 100644 --- a/issues/2023-08-03.44.issue.closed.md +++ b/issues/2023-08-03.44.issue.closed.md @@ -17,7 +17,7 @@ I would like to report the following issue/feedback - [X] I agree to follow this project's Code of Conduct -#### [msnishanth9001](https://github.com/msnishanth9001) commented at [2023-08-03 05:58](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/44#issuecomment-1663336553): +#### [msnishanth9001](https://github.com/msnishanth9001) commented at [2023-08-03 05:58](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/44#issuecomment-1663336553): this should be solved with this issue? https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/14 diff --git a/issues/2023-08-03.46.issue.closed.md b/issues/2023-08-03.46.issue.closed.md index 774649a..1ab10e9 100644 --- a/issues/2023-08-03.46.issue.closed.md +++ b/issues/2023-08-03.46.issue.closed.md @@ -1,5 +1,5 @@ # [\#46 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/46) `closed`: bug(website): remove pages included from project templates -**Labels**: `documentation`, `issues/admin`, `issues/triage`, `bug` +**Labels**: `documentation/general`, `issues/admin`, `issues/triage`, `bug` #### [shsingh](https://github.com/shsingh) opened issue at [2023-08-03 07:44](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/46): diff --git a/issues/2023-08-03.47.pr.closed.md b/issues/2023-08-03.47.pr.closed.md index 0e7d132..c9bd269 100644 --- a/issues/2023-08-03.47.pr.closed.md +++ b/issues/2023-08-03.47.pr.closed.md @@ -2,7 +2,7 @@ **Labels**: `enhancement`, `review needed` -#### [msnishanth9001](https://github.com/msnishanth9001) opened issue at [2023-08-03 08:18](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/47): +#### [msnishanth9001](https://github.com/msnishanth9001) opened issue at [2023-08-03 08:18](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/47): This is a github action to compile all MDs and generate a PDF. This is a base revision. @@ -15,7 +15,7 @@ will capture the above in the same PR. https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/14 -#### [msnishanth9001](https://github.com/msnishanth9001) commented at [2023-08-03 09:21](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/47#issuecomment-1663611519): +#### [msnishanth9001](https://github.com/msnishanth9001) commented at [2023-08-03 09:21](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/47#issuecomment-1663611519): yes. sure. diff --git a/issues/2023-08-09.56.issue.closed.md b/issues/2023-08-09.56.issue.closed.md index f1054d1..4dd9ca7 100644 --- a/issues/2023-08-09.56.issue.closed.md +++ b/issues/2023-08-09.56.issue.closed.md @@ -1,5 +1,5 @@ # [\#56 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/56) `closed`: [FEEDBACK]: Risk Ranking Reference -**Labels**: `issues/general`, `documentation`, `good first issue`, `issues/triage` +**Labels**: `issues/general`, `documentation/general`, `good first issue`, `issues/triage` #### [RAJANAGORI](https://github.com/RAJANAGORI) opened issue at [2023-08-09 12:52](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/56): diff --git a/issues/2023-08-20.92.issue.closed.md b/issues/2023-08-20.92.issue.closed.md index fb94584..c95c323 100644 --- a/issues/2023-08-20.92.issue.closed.md +++ b/issues/2023-08-20.92.issue.closed.md @@ -1,5 +1,5 @@ # [\#92 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/92) `closed`: refactor: rename "neural net reprogramming" to "model poisoning" -**Labels**: `documentation`, `discussions/mltop10` +**Labels**: `documentation/general`, `discussions/mltop10` #### [shsingh](https://github.com/shsingh) opened issue at [2023-08-20 19:39](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/92): diff --git a/issues/2023-08-24.96.issue.closed.md b/issues/2023-08-24.96.issue.closed.md index 0323f6c..5acfeb2 100644 --- a/issues/2023-08-24.96.issue.closed.md +++ b/issues/2023-08-24.96.issue.closed.md @@ -1,5 +1,5 @@ # [\#96 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/96) `closed`: chore: make draft status more prominent -**Labels**: `documentation`, `issues/admin` +**Labels**: `documentation/general`, `issues/admin` #### [shsingh](https://github.com/shsingh) opened issue at [2023-08-24 09:12](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/96): diff --git a/issues/2023-08-24.99.issue.open.md b/issues/2023-08-24.99.issue.open.md index 7aa0034..198ba42 100644 --- a/issues/2023-08-24.99.issue.open.md +++ b/issues/2023-08-24.99.issue.open.md @@ -1,5 +1,5 @@ # [\#99 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/99) `open`: feat(rendering): make PDF output from Markdown files more presentable -**Labels**: `documentation`, `enhancement`, `help wanted` +**Labels**: `documentation/general`, `enhancement`, `help wanted` #### [shsingh](https://github.com/shsingh) opened issue at [2023-08-24 21:34](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/99): diff --git a/issues/2023-08-25.100.pr.closed.md b/issues/2023-08-25.100.pr.closed.md index 9d7c12f..3296dc4 100644 --- a/issues/2023-08-25.100.pr.closed.md +++ b/issues/2023-08-25.100.pr.closed.md @@ -1,6 +1,6 @@ # [\#100 PR](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/100) `closed`: Usage Guidelines proposition -#### [mik0w](https://github.com/mik0w) opened issue at [2023-08-25 14:30](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/100): +#### [mik0w](https://github.com/mik0w) opened issue at [2023-08-25 14:30](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/100): This PR is related to this Issue: https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/43 diff --git a/issues/2023-08-25.101.pr.merged.md b/issues/2023-08-25.101.pr.merged.md index c0b1a87..16a83d1 100644 --- a/issues/2023-08-25.101.pr.merged.md +++ b/issues/2023-08-25.101.pr.merged.md @@ -1,6 +1,6 @@ # [\#101 PR](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/101) `merged`: guidelines draft -#### [mik0w](https://github.com/mik0w) opened issue at [2023-08-25 14:38](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/101): +#### [mik0w](https://github.com/mik0w) opened issue at [2023-08-25 14:38](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/101): This PR is related to this issue: https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/43 diff --git a/issues/2023-09-05.105.issue.open.md b/issues/2023-09-05.105.issue.closed.md similarity index 76% rename from issues/2023-09-05.105.issue.open.md rename to issues/2023-09-05.105.issue.closed.md index f50bf7b..3ac4491 100644 --- a/issues/2023-09-05.105.issue.open.md +++ b/issues/2023-09-05.105.issue.closed.md @@ -1,5 +1,5 @@ -# [\#105 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/105) `open`: refactor: rename 'Corrupted packages' to 'AI supply chain attacks' -**Labels**: `documentation`, `discussions/mltop10` +# [\#105 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/105) `closed`: refactor: rename 'Corrupted packages' to 'AI supply chain attacks' +**Labels**: `documentation/general`, `discussions/mltop10` #### [shsingh](https://github.com/shsingh) opened issue at [2023-09-05 09:31](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/105): diff --git a/issues/2023-09-05.106.issue.closed.md b/issues/2023-09-05.106.issue.closed.md index 7b97da8..a47e223 100644 --- a/issues/2023-09-05.106.issue.closed.md +++ b/issues/2023-09-05.106.issue.closed.md @@ -1,5 +1,5 @@ # [\#106 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/106) `closed`: refactor: rename "adversarial attack" to "input manipulation" -**Labels**: `documentation`, `discussions/mltop10` +**Labels**: `documentation/general`, `discussions/mltop10` #### [shsingh](https://github.com/shsingh) opened issue at [2023-09-05 09:35](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/106): diff --git a/issues/2023-09-08.113.issue.open.md b/issues/2023-09-08.113.issue.open.md index 3e5bf41..69a1c87 100644 --- a/issues/2023-09-08.113.issue.open.md +++ b/issues/2023-09-08.113.issue.open.md @@ -1,4 +1,6 @@ # [\#113 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/113) `open`: Model stealing through interaction is not mentioned +**Labels**: `issues/triage` + #### [robvanderveer](https://github.com/robvanderveer) opened issue at [2023-09-08 21:44](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/113): diff --git a/issues/2023-09-26.116.issue.closed.md b/issues/2023-09-26.116.issue.closed.md index 24ddc9f..5d35d87 100644 --- a/issues/2023-09-26.116.issue.closed.md +++ b/issues/2023-09-26.116.issue.closed.md @@ -2,7 +2,7 @@ **Labels**: `issues/general`, `issues/triage`, `discussions/mltop10`, `discussions/feedback` -#### [mik0w](https://github.com/mik0w) opened issue at [2023-09-26 13:46](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/116): +#### [mik0w](https://github.com/mik0w) opened issue at [2023-09-26 13:46](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/116): ### Type diff --git a/issues/2023-09-29.118.pr.merged.md b/issues/2023-09-29.118.pr.merged.md new file mode 100644 index 0000000..f1ba5d9 --- /dev/null +++ b/issues/2023-09-29.118.pr.merged.md @@ -0,0 +1,14 @@ +# [\#118 PR](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/118) `merged`: refactor: rename 'corrupted packages' to 'ai supply chain attacks' + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-09-29 00:02](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/118): + + + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-09-29.119.pr.closed.md b/issues/2023-09-29.119.pr.closed.md new file mode 100644 index 0000000..b1904e3 --- /dev/null +++ b/issues/2023-09-29.119.pr.closed.md @@ -0,0 +1,23 @@ +# [\#119 PR](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/119) `closed`: website fixes. +**Labels**: `issues/general`, `enhancement` + + +#### [msnishanth9001](https://github.com/msnishanth9001) opened issue at [2023-09-29 09:54](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/119): + +this PR contains, +1. Workflow to automate mirror to the https://mltop10.info/ host GitHub repo. +2. . Fixes MD files, so the ePUB renders without errors. +3. Fixes alignment of tables. + +note, the table data arrangement is not good so the ePUB variant has jumbled data. This can be revisited once the tabular data is fixed. + +#### [msnishanth9001](https://github.com/msnishanth9001) commented at [2023-09-29 09:55](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/119#issuecomment-1740626718): + +this is part of https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/99 + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-04.120.pr.merged.md b/issues/2023-10-04.120.pr.merged.md new file mode 100644 index 0000000..e8376fc --- /dev/null +++ b/issues/2023-10-04.120.pr.merged.md @@ -0,0 +1,14 @@ +# [\#120 PR](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/120) `merged`: docs: add slides for OWASP Global AppSec Singapore 2023 + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-04 22:50](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/120): + + + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-05.121.issue.closed.md b/issues/2023-10-05.121.issue.closed.md new file mode 100644 index 0000000..f67bbb8 --- /dev/null +++ b/issues/2023-10-05.121.issue.closed.md @@ -0,0 +1,27 @@ +# [\#121 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/121) `closed`: OWASP Machine Learning Security Top 10 - Draft release v0.2 - ML01:2023 Input Manipulation Attack + +#### [ankitloud](https://github.com/ankitloud) opened issue at [2023-10-05 17:08](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/121): + +### Discussed in https://github.com/OWASP/www-project-machine-learning-security-top-10/discussions/115 + +
+ +Originally posted by **giscus[bot]** September 20, 2023 +# OWASP Machine Learning Security Top 10 - Draft release v0.2 - ML01:2023 Input Manipulation Attack + + + +https://mltop10.info/ML01_2023-Input_Manipulation_Attack.html + +
+ +#### [ankitloud](https://github.com/ankitloud) commented at [2023-10-05 17:09](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/121#issuecomment-1749328720): + +Attack vector Exploitability: 5 (Easy) doesn't look so easy. Since attack requires technical knowledge of deep learning and image processing techniques. How someone first get into the data source and get the data and then exploit. In the same way impact should be high rather difficult since if data is manipulated then it can generate lot of unexpected results and few of them could be life threating as well. + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-06.123.issue.closed.md b/issues/2023-10-06.123.issue.closed.md new file mode 100644 index 0000000..197de19 --- /dev/null +++ b/issues/2023-10-06.123.issue.closed.md @@ -0,0 +1,34 @@ +# [\#123 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/123) `closed`: OWASP Machine Learning Security Top 10 - Draft release v0.2 - ML01:2023 Input Manipulation Attack +**Labels**: `discussions/mltop10` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-06 05:35](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/123): + +### Discussed in https://github.com/OWASP/www-project-machine-learning-security-top-10/discussions/122 + +
+ +Originally posted by **ankitloud** October 6, 2023 +### Discussed in https://github.com/OWASP/www-project-machine-learning-security-top-10/discussions/115 + +
+ +Originally posted by **giscus[bot]** September 20, 2023 +# OWASP Machine Learning Security Top 10 - Draft release v0.2 - ML01:2023 Input Manipulation Attack + + + +https://mltop10.info/ML01_2023-Input_Manipulation_Attack.html + +
+ +#### [shsingh](https://github.com/shsingh) commented at [2023-10-06 05:41](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/123#issuecomment-1750014076): + +duplicate of #115 + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-09.124.pr.closed.md b/issues/2023-10-09.124.pr.closed.md new file mode 100644 index 0000000..9c99e95 --- /dev/null +++ b/issues/2023-10-09.124.pr.closed.md @@ -0,0 +1,19 @@ +# [\#124 PR](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/124) `closed`: website fixes + +#### [msnishanth9001](https://github.com/msnishanth9001) opened issue at [2023-10-09 18:21](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/124): + +this PR contains, +1. Workflow to automate mirror to the https://mltop10.info/ host GitHub repo. +2. Fixes MD files, so the ePUB renders without errors. +3. Fixes alignment of tables. + +note, the table data arrangement is not good so the ePUB variant has jumbled data. This can be revisited once the tabular data is fixed. + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-09.125.issue.closed.md b/issues/2023-10-09.125.issue.closed.md new file mode 100644 index 0000000..4007bcc --- /dev/null +++ b/issues/2023-10-09.125.issue.closed.md @@ -0,0 +1,26 @@ +# [\#125 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/125) `closed`: [FEEDBACK]: sync master and dev branch. +**Labels**: `issues/general`, `issues/triage` + + +#### [msnishanth9001](https://github.com/msnishanth9001) opened issue at [2023-10-09 18:36](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/125): + +### Type + +General Feedback + +### What would you like to report? + +I would like to report the following issue/feedback + +### Code of Conduct + +- [X] I agree to follow this project's Code of Conduct + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-18.126.pr.merged.md b/issues/2023-10-18.126.pr.merged.md new file mode 100644 index 0000000..7034479 --- /dev/null +++ b/issues/2023-10-18.126.pr.merged.md @@ -0,0 +1,14 @@ +# [\#126 PR](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/126) `merged`: Sync branch: develop with master + +#### [sagarbhure](https://github.com/sagarbhure) opened issue at [2023-10-18 13:28](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/126): + +#125 + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-18.127.pr.closed.md b/issues/2023-10-18.127.pr.closed.md new file mode 100644 index 0000000..7f6ef93 --- /dev/null +++ b/issues/2023-10-18.127.pr.closed.md @@ -0,0 +1,14 @@ +# [\#127 PR](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/127) `closed`: Merge pull request #126 from OWASP/master + +#### [sagarbhure](https://github.com/sagarbhure) opened issue at [2023-10-18 13:30](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/127): + +Sync branch: develop with master + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-20.128.issue.open.md b/issues/2023-10-20.128.issue.open.md new file mode 100644 index 0000000..d0fe3b7 --- /dev/null +++ b/issues/2023-10-20.128.issue.open.md @@ -0,0 +1,24 @@ +# [\#128 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/128) `open`: Workflow to clone Top 10 attacks to mirror site https://mltop10.info/ +**Labels**: `documentation/general` + + +#### [msnishanth9001](https://github.com/msnishanth9001) opened issue at [2023-10-20 06:49](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/128): + +Construct workflow to clone the Top 10 attack's MD File to the Repo https://github.com/mltop10-info/mltop10.info. + +So that all changes to attack scenarios are pushed by WF rather than human interaction. + +#### [shsingh](https://github.com/shsingh) commented at [2023-10-30 00:38](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/128#issuecomment-1784306108): + +Hi @msnishanth9001 + +commented on #129 + +workflow for mirroring is at this stage less important then rendering of the markdown into pdf and epub. + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-20.129.pr.open.md b/issues/2023-10-20.129.pr.open.md new file mode 100644 index 0000000..d6a7195 --- /dev/null +++ b/issues/2023-10-20.129.pr.open.md @@ -0,0 +1,40 @@ +# [\#129 PR](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/129) `open`: fix ePUB and WF to push updates to Repo + +#### [msnishanth9001](https://github.com/msnishanth9001) opened issue at [2023-10-20 06:50](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/129): + +this PR contains fix to #99 and #128 + +1. Workflow to automate mirror to the https://mltop10.info/ host GitHub repo. +2. Fixes MD files, so the ePUB renders without errors. +3. Fixes alignment of tables. + +note, the data in table arrangement is not good so the ePUB variant has jumbled data. This can be revisited once the tabular data is fixed. + +#### [msnishanth9001](https://github.com/msnishanth9001) commented at [2023-10-20 06:54](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/129#issuecomment-1772185642): + +Note, this requires a GitHub token of the MLTOP10 Repo, saved with name COPY_TOKEN to do the WF push. + +#### [shsingh](https://github.com/shsingh) commented at [2023-10-30 00:36](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/129#issuecomment-1784304978): + +> this PR contains fix to #99 and #128 +> +> 1. Workflow to automate mirror to the https://mltop10.info/ host GitHub repo. +> 2. Fixes MD files, so the ePUB renders without errors. +> 3. Fixes alignment of tables. +> +> note, the data in table arrangement is not good so the ePUB variant has jumbled data. This can be revisited once the tabular data is fixed. + +Hi @msnishanth9001 thanks for the PR. + +Is the intent of this PR to mirror or to fix formatting issues? Or both? + +At this stage the repo for https://mltop10.info is done manually because it needs a manual run of 'quarto' to generate the files. + +The rendering of EPUB and PDF at this stage is more critical then worrying about the mirroring portion IMHO. + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.130.issue.open.md b/issues/2023-10-30.130.issue.open.md new file mode 100644 index 0000000..7c7a625 --- /dev/null +++ b/issues/2023-10-30.130.issue.open.md @@ -0,0 +1,20 @@ +# [\#130 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/130) `open`: feat(docs): create guide for how to use Top 10 list as a ML Engineer +**Labels**: `enhancement`, `help wanted`, `documentation/guides` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 01:36](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/130): + +Reference https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/GUIDELINES.md#ml-engineeranalyst + +- [ ] Create a detailed guidelines document for how to use the information in the Top 10 list for use day to day + +#### [shsingh](https://github.com/shsingh) commented at [2023-10-30 01:55](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/130#issuecomment-1784357062): + +initial issue mentioned #43 + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.131.issue.open.md b/issues/2023-10-30.131.issue.open.md new file mode 100644 index 0000000..8e6fce4 --- /dev/null +++ b/issues/2023-10-30.131.issue.open.md @@ -0,0 +1,20 @@ +# [\#131 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/131) `open`: feat(docs): create guide for how to use Top 10 list as a AppSec Engineer +**Labels**: `enhancement`, `help wanted`, `documentation/guides` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 01:43](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/131): + +Reference https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/GUIDELINES.md#pentestersecurity-engineer + +- [ ] Create a detailed guidelines document for how to use the information in the Top 10 list for use day to day + +#### [shsingh](https://github.com/shsingh) commented at [2023-10-30 01:55](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/131#issuecomment-1784357377): + +initial issue mentioned #43 + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.132.issue.open.md b/issues/2023-10-30.132.issue.open.md new file mode 100644 index 0000000..26681b7 --- /dev/null +++ b/issues/2023-10-30.132.issue.open.md @@ -0,0 +1,20 @@ +# [\#132 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/132) `open`: feat(docs): create guide for how to use Top 10 list as a CISO +**Labels**: `enhancement`, `help wanted`, `documentation/guides` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 01:46](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/132): + +Reference https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/GUIDELINES.md#ciso + +- [ ] Create a detailed guidelines document for how to use the information in the Top 10 list for use day to day + +#### [shsingh](https://github.com/shsingh) commented at [2023-10-30 01:56](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/132#issuecomment-1784357658): + +initial issue mentioned #43 + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.133.issue.open.md b/issues/2023-10-30.133.issue.open.md new file mode 100644 index 0000000..0c2aac2 --- /dev/null +++ b/issues/2023-10-30.133.issue.open.md @@ -0,0 +1,20 @@ +# [\#133 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/133) `open`: feat(docs): create guide for how to use Top 10 list as a Developer +**Labels**: `enhancement`, `help wanted`, `documentation/guides` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 01:47](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/133): + +Reference https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/GUIDELINES.md#developers + +- [ ] Create a detailed guidelines document for how to use the information in the Top 10 list for use day to day + +#### [shsingh](https://github.com/shsingh) commented at [2023-10-30 01:56](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/133#issuecomment-1784357594): + +initial issue mentioned #43 + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.134.issue.open.md b/issues/2023-10-30.134.issue.open.md new file mode 100644 index 0000000..a341dfe --- /dev/null +++ b/issues/2023-10-30.134.issue.open.md @@ -0,0 +1,20 @@ +# [\#134 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/134) `open`: feat(docs): create guide for how to use Top 10 list as an MLOps Engineer +**Labels**: `enhancement`, `help wanted`, `documentation/guides` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 01:49](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/134): + +Reference https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/GUIDELINES.md#mlops + +- [ ] Create a detailed guidelines document for how to use the information in the Top 10 list for use day to day + +#### [shsingh](https://github.com/shsingh) commented at [2023-10-30 01:55](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/134#issuecomment-1784357519): + +initial issue mentioned #43 + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.135.issue.open.md b/issues/2023-10-30.135.issue.open.md new file mode 100644 index 0000000..bb28b7f --- /dev/null +++ b/issues/2023-10-30.135.issue.open.md @@ -0,0 +1,20 @@ +# [\#135 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/135) `open`: feat(docs): create guide for how to use Top 10 list as a Data Engineer +**Labels**: `enhancement`, `help wanted`, `documentation/guides` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 01:51](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/135): + +Reference https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/GUIDELINES.md#data-engineer + +- [ ] Create a detailed guidelines document for how to use the information in the Top 10 list for use day to day + +#### [shsingh](https://github.com/shsingh) commented at [2023-10-30 01:55](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/135#issuecomment-1784357453): + +initial issue mentioned #43 + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.136.issue.open.md b/issues/2023-10-30.136.issue.open.md new file mode 100644 index 0000000..02f6d26 --- /dev/null +++ b/issues/2023-10-30.136.issue.open.md @@ -0,0 +1,19 @@ +# [\#136 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/136) `open`: feat(docs): create a recorded demo of ML01 Input Manipulation Attack +**Labels**: `enhancement`, `help wanted`, `documentation/demos` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:17](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/136): + +- [ ] Create a recorded video demo (no audio) + +Video will be uploaded to [OWASP Youtube Channel](https://www.youtube.com/@owasp-mltop10) + + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.137.issue.open.md b/issues/2023-10-30.137.issue.open.md new file mode 100644 index 0000000..1083abe --- /dev/null +++ b/issues/2023-10-30.137.issue.open.md @@ -0,0 +1,18 @@ +# [\#137 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/137) `open`: feat(docs): create a recorded demo of ML02 Data Poisoning Attack +**Labels**: `enhancement`, `help wanted`, `documentation/demos` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:22](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/137): + +- [ ] Create a recorded video demo (no audio) + +Video will be uploaded to [OWASP Youtube Channel](https://www.youtube.com/@owasp-mltop10) + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.138.issue.open.md b/issues/2023-10-30.138.issue.open.md new file mode 100644 index 0000000..b0b0d91 --- /dev/null +++ b/issues/2023-10-30.138.issue.open.md @@ -0,0 +1,18 @@ +# [\#138 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/138) `open`: feat(docs): create a recorded demo of ML03 Model Inversion Attack +**Labels**: `enhancement`, `help wanted`, `documentation/demos` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:23](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/138): + +- [ ] Create a recorded video demo (no audio) + +Video will be uploaded to [OWASP Youtube Channel](https://www.youtube.com/@owasp-mltop10) + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.139.issue.open.md b/issues/2023-10-30.139.issue.open.md new file mode 100644 index 0000000..f40d305 --- /dev/null +++ b/issues/2023-10-30.139.issue.open.md @@ -0,0 +1,18 @@ +# [\#139 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/139) `open`: feat(docs): create a recorded demo of ML04 Membership Inference Attack +**Labels**: `enhancement`, `help wanted`, `documentation/demos` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:23](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/139): + +- [ ] Create a recorded video demo (no audio) + +Video will be uploaded to [OWASP Youtube Channel](https://www.youtube.com/@owasp-mltop10) + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.140.issue.open.md b/issues/2023-10-30.140.issue.open.md new file mode 100644 index 0000000..1384b5f --- /dev/null +++ b/issues/2023-10-30.140.issue.open.md @@ -0,0 +1,18 @@ +# [\#140 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/140) `open`: feat(docs): create a recorded demo of ML05 Model Stealing +**Labels**: `enhancement`, `help wanted`, `documentation/demos` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:24](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/140): + +- [ ] Create a recorded video demo (no audio) + +Video will be uploaded to [OWASP Youtube Channel](https://www.youtube.com/@owasp-mltop10) + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.141.issue.open.md b/issues/2023-10-30.141.issue.open.md new file mode 100644 index 0000000..c2d2947 --- /dev/null +++ b/issues/2023-10-30.141.issue.open.md @@ -0,0 +1,18 @@ +# [\#141 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/141) `open`: feat(docs): create a recorded demo of ML06 AI Supply Chain Attacks +**Labels**: `enhancement`, `help wanted`, `documentation/demos` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:24](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/141): + +- [ ] Create a recorded video demo (no audio) + +Video will be uploaded to [OWASP Youtube Channel](https://www.youtube.com/@owasp-mltop10) + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.142.issue.open.md b/issues/2023-10-30.142.issue.open.md new file mode 100644 index 0000000..3d39110 --- /dev/null +++ b/issues/2023-10-30.142.issue.open.md @@ -0,0 +1,18 @@ +# [\#142 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/142) `open`: feat(docs): create a recorded demo of ML07 Transfer Learning Attack +**Labels**: `enhancement`, `help wanted`, `documentation/demos` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:24](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/142): + +- [ ] Create a recorded video demo (no audio) + +Video will be uploaded to [OWASP Youtube Channel](https://www.youtube.com/@owasp-mltop10) + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.143.issue.open.md b/issues/2023-10-30.143.issue.open.md new file mode 100644 index 0000000..86afa89 --- /dev/null +++ b/issues/2023-10-30.143.issue.open.md @@ -0,0 +1,18 @@ +# [\#143 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/143) `open`: feat(docs): create a recorded demo of ML08 Model Skewing +**Labels**: `enhancement`, `help wanted`, `documentation/demos` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:25](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/143): + +- [ ] Create a recorded video demo (no audio) + +Video will be uploaded to [OWASP Youtube Channel](https://www.youtube.com/@owasp-mltop10) + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.144.issue.open.md b/issues/2023-10-30.144.issue.open.md new file mode 100644 index 0000000..a142dc9 --- /dev/null +++ b/issues/2023-10-30.144.issue.open.md @@ -0,0 +1,18 @@ +# [\#144 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/144) `open`: feat(docs): create a recorded demo of ML09 Output Integrity Attack +**Labels**: `enhancement`, `help wanted`, `documentation/demos` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:26](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/144): + +- [ ] Create a recorded video demo (no audio) + +Video will be uploaded to [OWASP Youtube Channel](https://www.youtube.com/@owasp-mltop10) + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.145.issue.open.md b/issues/2023-10-30.145.issue.open.md new file mode 100644 index 0000000..739235d --- /dev/null +++ b/issues/2023-10-30.145.issue.open.md @@ -0,0 +1,18 @@ +# [\#145 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/145) `open`: feat(docs): create a recorded demo of ML10 Model Poisoning +**Labels**: `enhancement`, `help wanted`, `documentation/demos` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:26](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/145): + +- [ ] Create a recorded video demo (no audio) + +Video will be uploaded to [OWASP Youtube Channel](https://www.youtube.com/@owasp-mltop10) + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.146.issue.closed.md b/issues/2023-10-30.146.issue.closed.md new file mode 100644 index 0000000..fbf4171 --- /dev/null +++ b/issues/2023-10-30.146.issue.closed.md @@ -0,0 +1,34 @@ +# [\#146 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/146) `closed`: chore: create issues for cheatsheets +**Labels**: `issues/admin` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:37](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/146): + +- [x] Create an issue for each Top 10 risk for creation of cheatsheets +- [x] Create template for cheatsheet as example + +Reference: [OWASP Cheatsheets](https://cheatsheetseries.owasp.org/IndexTopTen.html) + +#### [shsingh](https://github.com/shsingh) commented at [2023-10-30 05:26](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/146#issuecomment-1784506343): + +# Reference + +Template for cheatsheet: #149 + +Issue for ML01: #147 +Issue for ML02: #150 +Issue for ML03: #151 +Issue for ML04: #152 +Issue for ML05: #153 +Issue for ML06: #154 +Issue for ML07: #155 +Issue for ML08: #156 +Issue for ML09: #157 +Issue for ML10: #158 + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.147.issue.open.md b/issues/2023-10-30.147.issue.open.md new file mode 100644 index 0000000..dbad539 --- /dev/null +++ b/issues/2023-10-30.147.issue.open.md @@ -0,0 +1,25 @@ +# [\#147 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/147) `open`: feat(docs): create a cheatsheet for ML01 Input Manipulation Attacks +**Labels**: `enhancement`, `help wanted`, `documentation/cheatsheets` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:48](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/147): + +- [ ] Is there existing cheatsheets at [OWASP Cheatsheets](https://cheatsheetseries.owasp.org/Glossary.html) +- [ ] If there is an existing cheatsheet, does it need updating at the source to cater for machine learning use cases? +- [ ] Is there a need for a new cheatsheet topic? +- [ ] Add existing or new cheatsheet as a reference to the Top 10 risk document + +Example Cheatsheet: [Input Validation Cheatsheet](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Input_Validation_Cheat_Sheet.md) + +Example of Top 10 risk referencing cheatsheets: [ML01 Input Manipulation Attacks - Cheatsheets](https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md) + + + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.148.pr.merged.md b/issues/2023-10-30.148.pr.merged.md new file mode 100644 index 0000000..9549bd7 --- /dev/null +++ b/issues/2023-10-30.148.pr.merged.md @@ -0,0 +1,14 @@ +# [\#148 PR](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/148) `merged`: feat: create example cheatsheet reference for ML01 + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 04:40](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/148): + + + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.149.pr.merged.md b/issues/2023-10-30.149.pr.merged.md new file mode 100644 index 0000000..e3ef145 --- /dev/null +++ b/issues/2023-10-30.149.pr.merged.md @@ -0,0 +1,16 @@ +# [\#149 PR](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/149) `merged`: shsingh/feat create example cheatsheet + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 04:52](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/149): + +- feat: create example cheatsheet reference for ML01 +- fix: update cheatsheet for ML01 + + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.150.issue.open.md b/issues/2023-10-30.150.issue.open.md new file mode 100644 index 0000000..cc99d4f --- /dev/null +++ b/issues/2023-10-30.150.issue.open.md @@ -0,0 +1,23 @@ +# [\#150 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/150) `open`: feat(docs): create a cheatsheet for ML02 Data Poisoning Attack +**Labels**: `enhancement`, `help wanted`, `documentation/cheatsheets` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 04:57](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/150): + +- [ ] Is there existing cheatsheets at [OWASP Cheatsheets](https://cheatsheetseries.owasp.org/Glossary.html) +- [ ] If there is an existing cheatsheet, does it need updating at the source to cater for machine learning use cases? +- [ ] Is there a need for a new cheatsheet topic? +- [ ] Add existing or new cheatsheet as a reference to the Top 10 risk document + +Example Cheatsheet: [Input Validation Cheatsheet](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Input_Validation_Cheat_Sheet.md) + +Example of Top 10 risk referencing cheatsheets: [ML01 Input Manipulation Attacks - Cheatsheets](https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md) + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.151.issue.open.md b/issues/2023-10-30.151.issue.open.md new file mode 100644 index 0000000..aa4ab02 --- /dev/null +++ b/issues/2023-10-30.151.issue.open.md @@ -0,0 +1,23 @@ +# [\#151 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/151) `open`: feat(docs): create a cheatsheet for ML03 Model Inversion Attack +**Labels**: `enhancement`, `help wanted`, `documentation/cheatsheets` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 04:58](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/151): + +- [ ] Is there existing cheatsheets at [OWASP Cheatsheets](https://cheatsheetseries.owasp.org/Glossary.html) +- [ ] If there is an existing cheatsheet, does it need updating at the source to cater for machine learning use cases? +- [ ] Is there a need for a new cheatsheet topic? +- [ ] Add existing or new cheatsheet as a reference to the Top 10 risk document + +Example Cheatsheet: [Input Validation Cheatsheet](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Input_Validation_Cheat_Sheet.md) + +Example of Top 10 risk referencing cheatsheets: [ML01 Input Manipulation Attacks - Cheatsheets](https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md) + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.152.issue.open.md b/issues/2023-10-30.152.issue.open.md new file mode 100644 index 0000000..41e0572 --- /dev/null +++ b/issues/2023-10-30.152.issue.open.md @@ -0,0 +1,23 @@ +# [\#152 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/152) `open`: feat(docs): create a cheatsheet for ML04 Membership Inference Attack +**Labels**: `enhancement`, `help wanted`, `documentation/cheatsheets` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 04:59](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/152): + +- [ ] Is there existing cheatsheets at [OWASP Cheatsheets](https://cheatsheetseries.owasp.org/Glossary.html) +- [ ] If there is an existing cheatsheet, does it need updating at the source to cater for machine learning use cases? +- [ ] Is there a need for a new cheatsheet topic? +- [ ] Add existing or new cheatsheet as a reference to the Top 10 risk document + +Example Cheatsheet: [Input Validation Cheatsheet](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Input_Validation_Cheat_Sheet.md) + +Example of Top 10 risk referencing cheatsheets: [ML01 Input Manipulation Attacks - Cheatsheets](https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md) + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.153.issue.open.md b/issues/2023-10-30.153.issue.open.md new file mode 100644 index 0000000..a64847c --- /dev/null +++ b/issues/2023-10-30.153.issue.open.md @@ -0,0 +1,23 @@ +# [\#153 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/153) `open`: feat(docs): create a cheatsheet for ML05 Model Stealing +**Labels**: `enhancement`, `help wanted`, `documentation/cheatsheets` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 04:59](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/153): + +- [ ] Is there existing cheatsheets at [OWASP Cheatsheets](https://cheatsheetseries.owasp.org/Glossary.html) +- [ ] If there is an existing cheatsheet, does it need updating at the source to cater for machine learning use cases? +- [ ] Is there a need for a new cheatsheet topic? +- [ ] Add existing or new cheatsheet as a reference to the Top 10 risk document + +Example Cheatsheet: [Input Validation Cheatsheet](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Input_Validation_Cheat_Sheet.md) + +Example of Top 10 risk referencing cheatsheets: [ML01 Input Manipulation Attacks - Cheatsheets](https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md) + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.154.issue.open.md b/issues/2023-10-30.154.issue.open.md new file mode 100644 index 0000000..8ac1eb6 --- /dev/null +++ b/issues/2023-10-30.154.issue.open.md @@ -0,0 +1,23 @@ +# [\#154 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/154) `open`: feat(docs): create a cheatsheet for ML06 AI Supply Chain Attacks +**Labels**: `enhancement`, `help wanted`, `documentation/cheatsheets` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 05:00](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/154): + +- [ ] Is there existing cheatsheets at [OWASP Cheatsheets](https://cheatsheetseries.owasp.org/Glossary.html) +- [ ] If there is an existing cheatsheet, does it need updating at the source to cater for machine learning use cases? +- [ ] Is there a need for a new cheatsheet topic? +- [ ] Add existing or new cheatsheet as a reference to the Top 10 risk document + +Example Cheatsheet: [Input Validation Cheatsheet](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Input_Validation_Cheat_Sheet.md) + +Example of Top 10 risk referencing cheatsheets: [ML01 Input Manipulation Attacks - Cheatsheets](https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md) + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.155.issue.open.md b/issues/2023-10-30.155.issue.open.md new file mode 100644 index 0000000..e508bc4 --- /dev/null +++ b/issues/2023-10-30.155.issue.open.md @@ -0,0 +1,23 @@ +# [\#155 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/155) `open`: feat(docs): create a cheatsheet for ML07 Transfer Learning Attack +**Labels**: `enhancement`, `help wanted`, `documentation/cheatsheets` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 05:00](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/155): + +- [ ] Is there existing cheatsheets at [OWASP Cheatsheets](https://cheatsheetseries.owasp.org/Glossary.html) +- [ ] If there is an existing cheatsheet, does it need updating at the source to cater for machine learning use cases? +- [ ] Is there a need for a new cheatsheet topic? +- [ ] Add existing or new cheatsheet as a reference to the Top 10 risk document + +Example Cheatsheet: [Input Validation Cheatsheet](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Input_Validation_Cheat_Sheet.md) + +Example of Top 10 risk referencing cheatsheets: [ML01 Input Manipulation Attacks - Cheatsheets](https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md) + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.156.issue.open.md b/issues/2023-10-30.156.issue.open.md new file mode 100644 index 0000000..0cc0667 --- /dev/null +++ b/issues/2023-10-30.156.issue.open.md @@ -0,0 +1,23 @@ +# [\#156 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/156) `open`: feat(docs): create a cheatsheet for ML08 Model Skewing +**Labels**: `enhancement`, `help wanted`, `documentation/cheatsheets` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 05:00](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/156): + +- [ ] Is there existing cheatsheets at [OWASP Cheatsheets](https://cheatsheetseries.owasp.org/Glossary.html) +- [ ] If there is an existing cheatsheet, does it need updating at the source to cater for machine learning use cases? +- [ ] Is there a need for a new cheatsheet topic? +- [ ] Add existing or new cheatsheet as a reference to the Top 10 risk document + +Example Cheatsheet: [Input Validation Cheatsheet](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Input_Validation_Cheat_Sheet.md) + +Example of Top 10 risk referencing cheatsheets: [ML01 Input Manipulation Attacks - Cheatsheets](https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md) + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.157.issue.open.md b/issues/2023-10-30.157.issue.open.md new file mode 100644 index 0000000..df929b1 --- /dev/null +++ b/issues/2023-10-30.157.issue.open.md @@ -0,0 +1,23 @@ +# [\#157 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/157) `open`: feat(docs): create a cheatsheet for ML09 Output Integrity Attack +**Labels**: `enhancement`, `help wanted`, `documentation/cheatsheets` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 05:01](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/157): + +- [ ] Is there existing cheatsheets at [OWASP Cheatsheets](https://cheatsheetseries.owasp.org/Glossary.html) +- [ ] If there is an existing cheatsheet, does it need updating at the source to cater for machine learning use cases? +- [ ] Is there a need for a new cheatsheet topic? +- [ ] Add existing or new cheatsheet as a reference to the Top 10 risk document + +Example Cheatsheet: [Input Validation Cheatsheet](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Input_Validation_Cheat_Sheet.md) + +Example of Top 10 risk referencing cheatsheets: [ML01 Input Manipulation Attacks - Cheatsheets](https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md) + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.158.issue.open.md b/issues/2023-10-30.158.issue.open.md new file mode 100644 index 0000000..62a722c --- /dev/null +++ b/issues/2023-10-30.158.issue.open.md @@ -0,0 +1,23 @@ +# [\#158 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/158) `open`: feat(docs): create a cheatsheet for ML10 Model Poisoning +**Labels**: `enhancement`, `help wanted`, `documentation/cheatsheets` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 05:01](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/158): + +- [ ] Is there existing cheatsheets at [OWASP Cheatsheets](https://cheatsheetseries.owasp.org/Glossary.html) +- [ ] If there is an existing cheatsheet, does it need updating at the source to cater for machine learning use cases? +- [ ] Is there a need for a new cheatsheet topic? +- [ ] Add existing or new cheatsheet as a reference to the Top 10 risk document + +Example Cheatsheet: [Input Validation Cheatsheet](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Input_Validation_Cheat_Sheet.md) + +Example of Top 10 risk referencing cheatsheets: [ML01 Input Manipulation Attacks - Cheatsheets](https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md) + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.159.issue.open.md b/issues/2023-10-30.159.issue.open.md new file mode 100644 index 0000000..827bf11 --- /dev/null +++ b/issues/2023-10-30.159.issue.open.md @@ -0,0 +1,17 @@ +# [\#159 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/159) `open`: chore: create issues for Top 10 owners and update CODEOWNERS +**Labels**: `issues/admin` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 05:27](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/159): + +- [ ] Create issue for each Top 10 with a request for an owner +- [ ] update CODEOWNERS with assigned owners + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.160.pr.merged.md b/issues/2023-10-30.160.pr.merged.md new file mode 100644 index 0000000..26fdb68 --- /dev/null +++ b/issues/2023-10-30.160.pr.merged.md @@ -0,0 +1,14 @@ +# [\#160 PR](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/160) `merged`: merge: develop + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 05:45](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/160): + + + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/open-issues.md b/open-issues.md index 5d048c6..365ea67 100644 --- a/open-issues.md +++ b/open-issues.md @@ -1,5 +1,532 @@ Export of Github issues for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10). +# [\#159 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/159) `open`: chore: create issues for Top 10 owners and update CODEOWNERS +**Labels**: `issues/admin` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 05:27](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/159): + +- [ ] Create issue for each Top 10 with a request for an owner +- [ ] update CODEOWNERS with assigned owners + + + + +------------------------------------------------------------------------------- + +# [\#158 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/158) `open`: feat(docs): create a cheatsheet for ML10 Model Poisoning +**Labels**: `enhancement`, `help wanted`, `documentation/cheatsheets` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 05:01](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/158): + +- [ ] Is there existing cheatsheets at [OWASP Cheatsheets](https://cheatsheetseries.owasp.org/Glossary.html) +- [ ] If there is an existing cheatsheet, does it need updating at the source to cater for machine learning use cases? +- [ ] Is there a need for a new cheatsheet topic? +- [ ] Add existing or new cheatsheet as a reference to the Top 10 risk document + +Example Cheatsheet: [Input Validation Cheatsheet](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Input_Validation_Cheat_Sheet.md) + +Example of Top 10 risk referencing cheatsheets: [ML01 Input Manipulation Attacks - Cheatsheets](https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md) + + + + +------------------------------------------------------------------------------- + +# [\#157 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/157) `open`: feat(docs): create a cheatsheet for ML09 Output Integrity Attack +**Labels**: `enhancement`, `help wanted`, `documentation/cheatsheets` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 05:01](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/157): + +- [ ] Is there existing cheatsheets at [OWASP Cheatsheets](https://cheatsheetseries.owasp.org/Glossary.html) +- [ ] If there is an existing cheatsheet, does it need updating at the source to cater for machine learning use cases? +- [ ] Is there a need for a new cheatsheet topic? +- [ ] Add existing or new cheatsheet as a reference to the Top 10 risk document + +Example Cheatsheet: [Input Validation Cheatsheet](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Input_Validation_Cheat_Sheet.md) + +Example of Top 10 risk referencing cheatsheets: [ML01 Input Manipulation Attacks - Cheatsheets](https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md) + + + + +------------------------------------------------------------------------------- + +# [\#156 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/156) `open`: feat(docs): create a cheatsheet for ML08 Model Skewing +**Labels**: `enhancement`, `help wanted`, `documentation/cheatsheets` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 05:00](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/156): + +- [ ] Is there existing cheatsheets at [OWASP Cheatsheets](https://cheatsheetseries.owasp.org/Glossary.html) +- [ ] If there is an existing cheatsheet, does it need updating at the source to cater for machine learning use cases? +- [ ] Is there a need for a new cheatsheet topic? +- [ ] Add existing or new cheatsheet as a reference to the Top 10 risk document + +Example Cheatsheet: [Input Validation Cheatsheet](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Input_Validation_Cheat_Sheet.md) + +Example of Top 10 risk referencing cheatsheets: [ML01 Input Manipulation Attacks - Cheatsheets](https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md) + + + + +------------------------------------------------------------------------------- + +# [\#155 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/155) `open`: feat(docs): create a cheatsheet for ML07 Transfer Learning Attack +**Labels**: `enhancement`, `help wanted`, `documentation/cheatsheets` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 05:00](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/155): + +- [ ] Is there existing cheatsheets at [OWASP Cheatsheets](https://cheatsheetseries.owasp.org/Glossary.html) +- [ ] If there is an existing cheatsheet, does it need updating at the source to cater for machine learning use cases? +- [ ] Is there a need for a new cheatsheet topic? +- [ ] Add existing or new cheatsheet as a reference to the Top 10 risk document + +Example Cheatsheet: [Input Validation Cheatsheet](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Input_Validation_Cheat_Sheet.md) + +Example of Top 10 risk referencing cheatsheets: [ML01 Input Manipulation Attacks - Cheatsheets](https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md) + + + + +------------------------------------------------------------------------------- + +# [\#154 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/154) `open`: feat(docs): create a cheatsheet for ML06 AI Supply Chain Attacks +**Labels**: `enhancement`, `help wanted`, `documentation/cheatsheets` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 05:00](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/154): + +- [ ] Is there existing cheatsheets at [OWASP Cheatsheets](https://cheatsheetseries.owasp.org/Glossary.html) +- [ ] If there is an existing cheatsheet, does it need updating at the source to cater for machine learning use cases? +- [ ] Is there a need for a new cheatsheet topic? +- [ ] Add existing or new cheatsheet as a reference to the Top 10 risk document + +Example Cheatsheet: [Input Validation Cheatsheet](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Input_Validation_Cheat_Sheet.md) + +Example of Top 10 risk referencing cheatsheets: [ML01 Input Manipulation Attacks - Cheatsheets](https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md) + + + + +------------------------------------------------------------------------------- + +# [\#153 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/153) `open`: feat(docs): create a cheatsheet for ML05 Model Stealing +**Labels**: `enhancement`, `help wanted`, `documentation/cheatsheets` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 04:59](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/153): + +- [ ] Is there existing cheatsheets at [OWASP Cheatsheets](https://cheatsheetseries.owasp.org/Glossary.html) +- [ ] If there is an existing cheatsheet, does it need updating at the source to cater for machine learning use cases? +- [ ] Is there a need for a new cheatsheet topic? +- [ ] Add existing or new cheatsheet as a reference to the Top 10 risk document + +Example Cheatsheet: [Input Validation Cheatsheet](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Input_Validation_Cheat_Sheet.md) + +Example of Top 10 risk referencing cheatsheets: [ML01 Input Manipulation Attacks - Cheatsheets](https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md) + + + + +------------------------------------------------------------------------------- + +# [\#152 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/152) `open`: feat(docs): create a cheatsheet for ML04 Membership Inference Attack +**Labels**: `enhancement`, `help wanted`, `documentation/cheatsheets` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 04:59](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/152): + +- [ ] Is there existing cheatsheets at [OWASP Cheatsheets](https://cheatsheetseries.owasp.org/Glossary.html) +- [ ] If there is an existing cheatsheet, does it need updating at the source to cater for machine learning use cases? +- [ ] Is there a need for a new cheatsheet topic? +- [ ] Add existing or new cheatsheet as a reference to the Top 10 risk document + +Example Cheatsheet: [Input Validation Cheatsheet](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Input_Validation_Cheat_Sheet.md) + +Example of Top 10 risk referencing cheatsheets: [ML01 Input Manipulation Attacks - Cheatsheets](https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md) + + + + +------------------------------------------------------------------------------- + +# [\#151 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/151) `open`: feat(docs): create a cheatsheet for ML03 Model Inversion Attack +**Labels**: `enhancement`, `help wanted`, `documentation/cheatsheets` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 04:58](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/151): + +- [ ] Is there existing cheatsheets at [OWASP Cheatsheets](https://cheatsheetseries.owasp.org/Glossary.html) +- [ ] If there is an existing cheatsheet, does it need updating at the source to cater for machine learning use cases? +- [ ] Is there a need for a new cheatsheet topic? +- [ ] Add existing or new cheatsheet as a reference to the Top 10 risk document + +Example Cheatsheet: [Input Validation Cheatsheet](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Input_Validation_Cheat_Sheet.md) + +Example of Top 10 risk referencing cheatsheets: [ML01 Input Manipulation Attacks - Cheatsheets](https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md) + + + + +------------------------------------------------------------------------------- + +# [\#150 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/150) `open`: feat(docs): create a cheatsheet for ML02 Data Poisoning Attack +**Labels**: `enhancement`, `help wanted`, `documentation/cheatsheets` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 04:57](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/150): + +- [ ] Is there existing cheatsheets at [OWASP Cheatsheets](https://cheatsheetseries.owasp.org/Glossary.html) +- [ ] If there is an existing cheatsheet, does it need updating at the source to cater for machine learning use cases? +- [ ] Is there a need for a new cheatsheet topic? +- [ ] Add existing or new cheatsheet as a reference to the Top 10 risk document + +Example Cheatsheet: [Input Validation Cheatsheet](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Input_Validation_Cheat_Sheet.md) + +Example of Top 10 risk referencing cheatsheets: [ML01 Input Manipulation Attacks - Cheatsheets](https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md) + + + + +------------------------------------------------------------------------------- + +# [\#147 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/147) `open`: feat(docs): create a cheatsheet for ML01 Input Manipulation Attacks +**Labels**: `enhancement`, `help wanted`, `documentation/cheatsheets` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:48](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/147): + +- [ ] Is there existing cheatsheets at [OWASP Cheatsheets](https://cheatsheetseries.owasp.org/Glossary.html) +- [ ] If there is an existing cheatsheet, does it need updating at the source to cater for machine learning use cases? +- [ ] Is there a need for a new cheatsheet topic? +- [ ] Add existing or new cheatsheet as a reference to the Top 10 risk document + +Example Cheatsheet: [Input Validation Cheatsheet](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Input_Validation_Cheat_Sheet.md) + +Example of Top 10 risk referencing cheatsheets: [ML01 Input Manipulation Attacks - Cheatsheets](https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/docs/cheatsheets/ML01_2023-Input_Manipulation_Attack-Cheatsheet.md) + + + + + + +------------------------------------------------------------------------------- + +# [\#145 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/145) `open`: feat(docs): create a recorded demo of ML10 Model Poisoning +**Labels**: `enhancement`, `help wanted`, `documentation/demos` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:26](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/145): + +- [ ] Create a recorded video demo (no audio) + +Video will be uploaded to [OWASP Youtube Channel](https://www.youtube.com/@owasp-mltop10) + + + + +------------------------------------------------------------------------------- + +# [\#144 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/144) `open`: feat(docs): create a recorded demo of ML09 Output Integrity Attack +**Labels**: `enhancement`, `help wanted`, `documentation/demos` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:26](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/144): + +- [ ] Create a recorded video demo (no audio) + +Video will be uploaded to [OWASP Youtube Channel](https://www.youtube.com/@owasp-mltop10) + + + + +------------------------------------------------------------------------------- + +# [\#143 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/143) `open`: feat(docs): create a recorded demo of ML08 Model Skewing +**Labels**: `enhancement`, `help wanted`, `documentation/demos` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:25](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/143): + +- [ ] Create a recorded video demo (no audio) + +Video will be uploaded to [OWASP Youtube Channel](https://www.youtube.com/@owasp-mltop10) + + + + +------------------------------------------------------------------------------- + +# [\#142 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/142) `open`: feat(docs): create a recorded demo of ML07 Transfer Learning Attack +**Labels**: `enhancement`, `help wanted`, `documentation/demos` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:24](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/142): + +- [ ] Create a recorded video demo (no audio) + +Video will be uploaded to [OWASP Youtube Channel](https://www.youtube.com/@owasp-mltop10) + + + + +------------------------------------------------------------------------------- + +# [\#141 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/141) `open`: feat(docs): create a recorded demo of ML06 AI Supply Chain Attacks +**Labels**: `enhancement`, `help wanted`, `documentation/demos` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:24](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/141): + +- [ ] Create a recorded video demo (no audio) + +Video will be uploaded to [OWASP Youtube Channel](https://www.youtube.com/@owasp-mltop10) + + + + +------------------------------------------------------------------------------- + +# [\#140 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/140) `open`: feat(docs): create a recorded demo of ML05 Model Stealing +**Labels**: `enhancement`, `help wanted`, `documentation/demos` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:24](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/140): + +- [ ] Create a recorded video demo (no audio) + +Video will be uploaded to [OWASP Youtube Channel](https://www.youtube.com/@owasp-mltop10) + + + + +------------------------------------------------------------------------------- + +# [\#139 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/139) `open`: feat(docs): create a recorded demo of ML04 Membership Inference Attack +**Labels**: `enhancement`, `help wanted`, `documentation/demos` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:23](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/139): + +- [ ] Create a recorded video demo (no audio) + +Video will be uploaded to [OWASP Youtube Channel](https://www.youtube.com/@owasp-mltop10) + + + + +------------------------------------------------------------------------------- + +# [\#138 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/138) `open`: feat(docs): create a recorded demo of ML03 Model Inversion Attack +**Labels**: `enhancement`, `help wanted`, `documentation/demos` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:23](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/138): + +- [ ] Create a recorded video demo (no audio) + +Video will be uploaded to [OWASP Youtube Channel](https://www.youtube.com/@owasp-mltop10) + + + + +------------------------------------------------------------------------------- + +# [\#137 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/137) `open`: feat(docs): create a recorded demo of ML02 Data Poisoning Attack +**Labels**: `enhancement`, `help wanted`, `documentation/demos` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:22](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/137): + +- [ ] Create a recorded video demo (no audio) + +Video will be uploaded to [OWASP Youtube Channel](https://www.youtube.com/@owasp-mltop10) + + + + +------------------------------------------------------------------------------- + +# [\#136 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/136) `open`: feat(docs): create a recorded demo of ML01 Input Manipulation Attack +**Labels**: `enhancement`, `help wanted`, `documentation/demos` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 02:17](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/136): + +- [ ] Create a recorded video demo (no audio) + +Video will be uploaded to [OWASP Youtube Channel](https://www.youtube.com/@owasp-mltop10) + + + + + +------------------------------------------------------------------------------- + +# [\#135 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/135) `open`: feat(docs): create guide for how to use Top 10 list as a Data Engineer +**Labels**: `enhancement`, `help wanted`, `documentation/guides` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 01:51](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/135): + +Reference https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/GUIDELINES.md#data-engineer + +- [ ] Create a detailed guidelines document for how to use the information in the Top 10 list for use day to day + +#### [shsingh](https://github.com/shsingh) commented at [2023-10-30 01:55](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/135#issuecomment-1784357453): + +initial issue mentioned #43 + + +------------------------------------------------------------------------------- + +# [\#134 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/134) `open`: feat(docs): create guide for how to use Top 10 list as an MLOps Engineer +**Labels**: `enhancement`, `help wanted`, `documentation/guides` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 01:49](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/134): + +Reference https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/GUIDELINES.md#mlops + +- [ ] Create a detailed guidelines document for how to use the information in the Top 10 list for use day to day + +#### [shsingh](https://github.com/shsingh) commented at [2023-10-30 01:55](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/134#issuecomment-1784357519): + +initial issue mentioned #43 + + +------------------------------------------------------------------------------- + +# [\#133 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/133) `open`: feat(docs): create guide for how to use Top 10 list as a Developer +**Labels**: `enhancement`, `help wanted`, `documentation/guides` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 01:47](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/133): + +Reference https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/GUIDELINES.md#developers + +- [ ] Create a detailed guidelines document for how to use the information in the Top 10 list for use day to day + +#### [shsingh](https://github.com/shsingh) commented at [2023-10-30 01:56](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/133#issuecomment-1784357594): + +initial issue mentioned #43 + + +------------------------------------------------------------------------------- + +# [\#132 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/132) `open`: feat(docs): create guide for how to use Top 10 list as a CISO +**Labels**: `enhancement`, `help wanted`, `documentation/guides` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 01:46](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/132): + +Reference https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/GUIDELINES.md#ciso + +- [ ] Create a detailed guidelines document for how to use the information in the Top 10 list for use day to day + +#### [shsingh](https://github.com/shsingh) commented at [2023-10-30 01:56](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/132#issuecomment-1784357658): + +initial issue mentioned #43 + + +------------------------------------------------------------------------------- + +# [\#131 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/131) `open`: feat(docs): create guide for how to use Top 10 list as a AppSec Engineer +**Labels**: `enhancement`, `help wanted`, `documentation/guides` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 01:43](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/131): + +Reference https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/GUIDELINES.md#pentestersecurity-engineer + +- [ ] Create a detailed guidelines document for how to use the information in the Top 10 list for use day to day + +#### [shsingh](https://github.com/shsingh) commented at [2023-10-30 01:55](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/131#issuecomment-1784357377): + +initial issue mentioned #43 + + +------------------------------------------------------------------------------- + +# [\#130 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/130) `open`: feat(docs): create guide for how to use Top 10 list as a ML Engineer +**Labels**: `enhancement`, `help wanted`, `documentation/guides` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 01:36](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/130): + +Reference https://github.com/OWASP/www-project-machine-learning-security-top-10/blob/master/GUIDELINES.md#ml-engineeranalyst + +- [ ] Create a detailed guidelines document for how to use the information in the Top 10 list for use day to day + +#### [shsingh](https://github.com/shsingh) commented at [2023-10-30 01:55](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/130#issuecomment-1784357062): + +initial issue mentioned #43 + + +------------------------------------------------------------------------------- + +# [\#129 PR](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/129) `open`: fix ePUB and WF to push updates to Repo + +#### [msnishanth9001](https://github.com/msnishanth9001) opened issue at [2023-10-20 06:50](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/129): + +this PR contains fix to #99 and #128 + +1. Workflow to automate mirror to the https://mltop10.info/ host GitHub repo. +2. Fixes MD files, so the ePUB renders without errors. +3. Fixes alignment of tables. + +note, the data in table arrangement is not good so the ePUB variant has jumbled data. This can be revisited once the tabular data is fixed. + +#### [msnishanth9001](https://github.com/msnishanth9001) commented at [2023-10-20 06:54](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/129#issuecomment-1772185642): + +Note, this requires a GitHub token of the MLTOP10 Repo, saved with name COPY_TOKEN to do the WF push. + +#### [shsingh](https://github.com/shsingh) commented at [2023-10-30 00:36](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/129#issuecomment-1784304978): + +> this PR contains fix to #99 and #128 +> +> 1. Workflow to automate mirror to the https://mltop10.info/ host GitHub repo. +> 2. Fixes MD files, so the ePUB renders without errors. +> 3. Fixes alignment of tables. +> +> note, the data in table arrangement is not good so the ePUB variant has jumbled data. This can be revisited once the tabular data is fixed. + +Hi @msnishanth9001 thanks for the PR. + +Is the intent of this PR to mirror or to fix formatting issues? Or both? + +At this stage the repo for https://mltop10.info is done manually because it needs a manual run of 'quarto' to generate the files. + +The rendering of EPUB and PDF at this stage is more critical then worrying about the mirroring portion IMHO. + + +------------------------------------------------------------------------------- + +# [\#128 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/128) `open`: Workflow to clone Top 10 attacks to mirror site https://mltop10.info/ +**Labels**: `documentation/general` + + +#### [msnishanth9001](https://github.com/msnishanth9001) opened issue at [2023-10-20 06:49](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/128): + +Construct workflow to clone the Top 10 attack's MD File to the Repo https://github.com/mltop10-info/mltop10.info. + +So that all changes to attack scenarios are pushed by WF rather than human interaction. + +#### [shsingh](https://github.com/shsingh) commented at [2023-10-30 00:38](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/128#issuecomment-1784306108): + +Hi @msnishanth9001 + +commented on #129 + +workflow for mirroring is at this stage less important then rendering of the markdown into pdf and epub. + + +------------------------------------------------------------------------------- + # [\#114 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/114) `open`: [Fortnightly] Working Group Meeting - 2023-Sep-14 **Labels**: `meeting` @@ -35,6 +562,8 @@ Export of Github issues for [OWASP/www-project-machine-learning-security-top-10] ------------------------------------------------------------------------------- # [\#113 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/113) `open`: Model stealing through interaction is not mentioned +**Labels**: `issues/triage` + #### [robvanderveer](https://github.com/robvanderveer) opened issue at [2023-09-08 21:44](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/113): @@ -43,19 +572,6 @@ The current model stealing only describes the model being stolen through paramet -------------------------------------------------------------------------------- - -# [\#105 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/105) `open`: refactor: rename 'Corrupted packages' to 'AI supply chain attacks' -**Labels**: `documentation`, `discussions/mltop10` - - -#### [shsingh](https://github.com/shsingh) opened issue at [2023-09-05 09:31](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/105): - -as per feedback in #85 - - - - ------------------------------------------------------------------------------- # [\#102 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/102) `open`: [Fortnightly] Working Group Meeting - 2023-Aug-31 @@ -84,7 +600,7 @@ as per feedback in #85 ------------------------------------------------------------------------------- # [\#99 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/99) `open`: feat(rendering): make PDF output from Markdown files more presentable -**Labels**: `documentation`, `enhancement`, `help wanted` +**Labels**: `documentation/general`, `enhancement`, `help wanted` #### [shsingh](https://github.com/shsingh) opened issue at [2023-08-24 21:34](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/99): @@ -133,53 +649,10 @@ Informative session and a quick update! cc: @sagarbhure @shsingh -------------------------------------------------------------------------------- - -# [\#43 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/43) `open`: feat(docs): create a set of guidelines for how to use the Top 10 list -**Labels**: `documentation`, `enhancement`, `help wanted` - - -#### [shsingh](https://github.com/shsingh) opened issue at [2023-08-02 14:02](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/43): - -Create a set of guidelines for how to consume the information presented in the Top 10 based on roles - -Example roles: -- MLOps/MLEng practitioner -- Appsec practitioner - -.. etc - -#### [sagarbhure](https://github.com/sagarbhure) commented at [2023-08-03 04:45](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/43#issuecomment-1663282934): - -Initial Idea - an umbrella of comprehensive 'nexts-steps.md' resembling a Venn diagram that highlight the intersections between Ethical/Privacy/ML10/LLM10 (i.e. representing efforts from various foundations) which can help tell logical relation between for ex ML and LLM and also there distinct roles and applications where it can also help any practitioner (ops, infra, soft, ml-eng. data-sci etc...) by indicating where they can find relevant resources to support their daily tasks. - -The ultimate goal of this initiative is to unify all these efforts under a single umbrella, fostering collaboration and knowledge sharing across different disciplines and specialties. Open to opinion's. - -#### [edthedev](https://github.com/edthedev) commented at [2023-08-03 14:30](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/43#issuecomment-1664094364): - -> Initial Idea - an umbrella of comprehensive 'nexts-steps.md' resembling a Venn diagram that highlight the intersections between Ethical/Privacy/ML10/LLM10 (i.e. representing efforts from various foundations) which can help tell logical relation between for ex ML and LLM and also there distinct roles and applications where it can also help any practitioner (ops, infra, soft, ml-eng. data-sci etc...) by indicating where they can find relevant resources to support their daily tasks. -> -> The ultimate goal of this initiative is to unify all these efforts under a single umbrella, fostering collaboration and knowledge sharing across different disciplines and specialties. Open to opinion's. - -@sagarbhure -Neat. I'm picturing 'swim lanes' for different roles, and process steps linked with arrows in an iterative process flow? - -#### [sagarbhure](https://github.com/sagarbhure) commented at [2023-08-04 08:17](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/43#issuecomment-1665203955): - -> > Initial Idea - an umbrella of comprehensive 'nexts-steps.md' resembling a Venn diagram that highlight the intersections between Ethical/Privacy/ML10/LLM10 (i.e. representing efforts from various foundations) which can help tell logical relation between for ex ML and LLM and also there distinct roles and applications where it can also help any practitioner (ops, infra, soft, ml-eng. data-sci etc...) by indicating where they can find relevant resources to support their daily tasks. -> > The ultimate goal of this initiative is to unify all these efforts under a single umbrella, fostering collaboration and knowledge sharing across different disciplines and specialties. Open to opinion's. -> -> @sagarbhure Neat. I'm picturing 'swim lanes' for different roles, and process steps linked with arrows in an iterative process flow? - -The analogy provided about the guideline is akin to a traffic police officer directing vehicles to take their respective lanes. It's great to see such analogies connecting real-life solutions to problems, as they effectively simplify things and add a new dimension to my thoughts. Thank you for that! - -More analogies ? Would love to see if you are open on contributing to this mission. - - ------------------------------------------------------------------------------- # [\#30 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/30) `open`: fix: merge existing body of work from EthicalML https://ethical.institute -**Labels**: `issues/general`, `good first issue`, `issues/triage` +**Labels**: `good first issue`, `issues/triage` #### [shsingh](https://github.com/shsingh) opened issue at [2023-07-25 04:39](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/30): @@ -215,7 +688,7 @@ This could also be an opportunity to look at the current Top 10 list categories ------------------------------------------------------------------------------- # [\#15 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/15) `open`: feat(docs): create page on calculating severity -**Labels**: `documentation`, `enhancement`, `help wanted` +**Labels**: `documentation/general`, `enhancement`, `help wanted` #### [shsingh](https://github.com/shsingh) opened issue at [2023-07-24 00:16](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/15): @@ -268,7 +741,42 @@ Isn’t model skewing the same as data poisoning? If there’s a difference, to 8 ML10 is called Neural net reprogramming but I guess the attack of changing parameters will work on any type of algorithm - not just neural networks. The description also mentions changing the training data, but perhaps that is better left out to avoid confusion with data poisoning? +#### [shsingh](https://github.com/shsingh) commented at [2023-09-29 00:13](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/2#issuecomment-1740146868): + +>1. +>ML01 +>In 'literature' the term ‘adversarial’ is often used for input manipulation attacks, but also for data poisoning, model >extraction etc. Therefore in order to avoid confusion it is probably better to rename the ML01 adversarial attack entry to >input manipulation? + +addressed in : #110 + +2. +It is worth considering to add ‘model evasion’ aka black box input manipulation to your top 10? Or do you prefer to have one entry for input manipulation all together? + +3. +ML03 +It is not clear to me how scenarios 1 and 2 work. I must be missing something. Usually model inversion is explained by manipulating synthesized faces until the algorithm behaves like it recognizes the face. + +4 +ML04 +It is not clear to me how scenario 1 works. +Standard methods against overtraining are missing form the ‘how to prevent’ part. Instead the advice is to reduce the training set size - which typically increases the overfitting problem. + +5 +ML05 +Model stealing describes a scenario where an attacker steals model parameters, but generally this attack takes place by ways of black box: gathering input-output pairs and training a new model on it. + +6 +ML07 +I don’t understand exactly how the presented scenario should work. I do know about the scenario where a pre-trained model was obtained that has been altered by an attacker. This matches the description. + +7 +ML08 +Isn’t model skewing the same as data poisoning? If there’s a difference, to me they are not apparent from the scenario and description. + +>8 +>ML10 is called Neural net reprogramming but I guess the attack of changing parameters will work on any type of algorithm >- not just neural networks. The description also mentions changing the training data, but perhaps that is better left out to >avoid confusion with data poisoning? +addressed in: #104 ------------------------------------------------------------------------------- From 2063261ae9ae6a204509f5c52c97a387bc355a44 Mon Sep 17 00:00:00 2001 From: Shain Singh Date: Mon, 30 Oct 2023 16:55:23 +1100 Subject: [PATCH 5/8] chore: archive gh issues --- open-issues.md => github-open-issues-exported.md | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename open-issues.md => github-open-issues-exported.md (100%) diff --git a/open-issues.md b/github-open-issues-exported.md similarity index 100% rename from open-issues.md rename to github-open-issues-exported.md From f05b8668e41bae0adc255846446e2f6c5a5c62f6 Mon Sep 17 00:00:00 2001 From: Shain Singh Date: Mon, 30 Oct 2023 17:43:51 +1100 Subject: [PATCH 6/8] chore: update CODEOWNERS --- .github/CODEOWNERS | 56 +++++++++++++++++++++++++++++++++++++++++++++- 1 file changed, 55 insertions(+), 1 deletion(-) diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index 8ec4046..6214733 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -1,4 +1,58 @@ +# Project Leads + * @shsingh @sagarbhure -/2023/ @shsingh @sagarbhure @axsaucedo +# Core Contributors + +/docs/ @shsingh @sagarbhure + +# ML01 Lead + +#/docs/ML01* +#/docs/cheatsheets/ML01* + + +# ML02 Lead + +#/docs/ML02* +#/docs/cheatsheets/ML02* + +# ML03 Lead + +#/docs/ML03* +#/docs/cheatsheets/ML03* + +# ML04 Lead + +#/docs/ML04* +#/docs/cheatsheets/ML04* + +# ML05 Lead + +#/docs/ML05* +#/docs/cheatsheets/ML05* + +# ML06 Lead + +#/docs/ML06* +#/docs/cheatsheets/ML06* + +# ML07 Lead + +#/docs/ML07* +#/docs/cheatsheets/ML07* + +# ML08 Lead + +#/docs/ML08* +#/docs/cheatsheets/ML08* + +# ML09 Lead + +#/docs/ML09* +#/docs/cheatsheets/ML09* + +# ML10 Lead +#/docs/ML10* +#/docs/cheatsheets/ML10* From bc0e5940c6df606be64420367eca1951b41bd6df Mon Sep 17 00:00:00 2001 From: Shain Singh Date: Mon, 30 Oct 2023 18:20:13 +1100 Subject: [PATCH 7/8] chore: archive gh issues --- github-open-issues-exported.md | 165 +++++++++++++++++++++++++- issues/2023-10-20.129.pr.open.md | 9 ++ issues/2023-10-30.159.issue.closed.md | 30 +++++ issues/2023-10-30.159.issue.open.md | 17 --- issues/2023-10-30.161.pr.merged.md | 33 ++++++ issues/2023-10-30.162.pr.merged.md | 36 ++++++ issues/2023-10-30.163.issue.open.md | 19 +++ issues/2023-10-30.164.issue.open.md | 19 +++ issues/2023-10-30.165.issue.open.md | 19 +++ issues/2023-10-30.166.issue.open.md | 19 +++ issues/2023-10-30.167.issue.open.md | 19 +++ issues/2023-10-30.168.issue.open.md | 19 +++ issues/2023-10-30.169.issue.open.md | 19 +++ issues/2023-10-30.170.issue.open.md | 19 +++ issues/2023-10-30.171.issue.open.md | 19 +++ issues/2023-10-30.172.issue.open.md | 19 +++ issues/2023-10-30.173.pr.merged.md | 20 ++++ issues/2023-10-30.174.issue.closed.md | 18 +++ 18 files changed, 496 insertions(+), 22 deletions(-) create mode 100644 issues/2023-10-30.159.issue.closed.md delete mode 100644 issues/2023-10-30.159.issue.open.md create mode 100644 issues/2023-10-30.161.pr.merged.md create mode 100644 issues/2023-10-30.162.pr.merged.md create mode 100644 issues/2023-10-30.163.issue.open.md create mode 100644 issues/2023-10-30.164.issue.open.md create mode 100644 issues/2023-10-30.165.issue.open.md create mode 100644 issues/2023-10-30.166.issue.open.md create mode 100644 issues/2023-10-30.167.issue.open.md create mode 100644 issues/2023-10-30.168.issue.open.md create mode 100644 issues/2023-10-30.169.issue.open.md create mode 100644 issues/2023-10-30.170.issue.open.md create mode 100644 issues/2023-10-30.171.issue.open.md create mode 100644 issues/2023-10-30.172.issue.open.md create mode 100644 issues/2023-10-30.173.pr.merged.md create mode 100644 issues/2023-10-30.174.issue.closed.md diff --git a/github-open-issues-exported.md b/github-open-issues-exported.md index 365ea67..d041e75 100644 --- a/github-open-issues-exported.md +++ b/github-open-issues-exported.md @@ -1,13 +1,159 @@ Export of Github issues for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10). -# [\#159 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/159) `open`: chore: create issues for Top 10 owners and update CODEOWNERS -**Labels**: `issues/admin` +# [\#172 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/172) `open`: chore(admin): assign owner(s) for ML10 Model Poisoning +**Labels**: `help wanted`, `documentation/risks` -#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 05:27](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/159): +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 06:31](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/172): -- [ ] Create issue for each Top 10 with a request for an owner -- [ ] update CODEOWNERS with assigned owners +- [ ] Assigned Lead Contributor for ML10 +- [ ] Update CODEOWNERS with contributor details + +Ideally the Lead Contributor for ML10 will also be assigned to the cheatsheet + + + + +------------------------------------------------------------------------------- + +# [\#171 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/171) `open`: chore(admin): assign owner(s) for ML09 Output Integrity Attack +**Labels**: `help wanted`, `documentation/risks` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 06:30](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/171): + +- [ ] Assigned Lead Contributor for ML09 +- [ ] Update CODEOWNERS with contributor details + +Ideally the Lead Contributor for ML09 will also be assigned to the cheatsheet + + + + +------------------------------------------------------------------------------- + +# [\#170 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/170) `open`: chore(admin): assign owner(s) for ML08 Model Skewing +**Labels**: `help wanted`, `documentation/risks` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 06:29](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/170): + +- [ ] Assigned Lead Contributor for ML08 +- [ ] Update CODEOWNERS with contributor details + +Ideally the Lead Contributor for ML08 will also be assigned to the cheatsheet + + + + +------------------------------------------------------------------------------- + +# [\#169 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/169) `open`: chore(admin): assign owner(s) for ML07 Transfer Learning Attack +**Labels**: `help wanted`, `documentation/risks` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 06:28](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/169): + +- [ ] Assigned Lead Contributor for ML07 +- [ ] Update CODEOWNERS with contributor details + +Ideally the Lead Contributor for ML07 will also be assigned to the cheatsheet + + + + +------------------------------------------------------------------------------- + +# [\#168 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/168) `open`: chore(admin): assign owner(s) for ML06 AI Supply Chain Attacks +**Labels**: `help wanted`, `documentation/risks` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 06:27](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/168): + +- [ ] Assigned Lead Contributor for ML06 +- [ ] Update CODEOWNERS with contributor details + +Ideally the Lead Contributor for ML06 will also be assigned to the cheatsheet + + + + +------------------------------------------------------------------------------- + +# [\#167 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/167) `open`: chore(admin): assign owner(s) for ML05 Model Stealing +**Labels**: `help wanted`, `documentation/risks` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 06:27](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/167): + +- [ ] Assigned Lead Contributor for ML05 +- [ ] Update CODEOWNERS with contributor details + +Ideally the Lead Contributor for ML05 will also be assigned to the cheatsheet + + + + +------------------------------------------------------------------------------- + +# [\#166 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/166) `open`: chore(admin): assign owner(s) for ML04 Membership Inference Attack +**Labels**: `help wanted`, `documentation/risks` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 06:26](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/166): + +- [ ] Assigned Lead Contributor for ML04 +- [ ] Update CODEOWNERS with contributor details + +Ideally the Lead Contributor for ML04 will also be assigned to the cheatsheet + + + + +------------------------------------------------------------------------------- + +# [\#165 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/165) `open`: chore(admin): assign owner(s) for ML03 Model Inversion Attack +**Labels**: `help wanted`, `documentation/risks` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 06:25](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/165): + +- [ ] Assigned Lead Contributor for ML03 +- [ ] Update CODEOWNERS with contributor details + +Ideally the Lead Contributor for ML03 will also be assigned to the cheatsheet + + + + +------------------------------------------------------------------------------- + +# [\#164 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/164) `open`: chore(admin): assign owner(s) for ML02 Data Poisoning Attack +**Labels**: `help wanted`, `documentation/risks` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 06:24](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/164): + +- [ ] Assigned Lead Contributor for ML02 +- [ ] Update CODEOWNERS with contributor details + +Ideally the Lead Contributor for ML02 will also be assigned to the cheatsheet + + + + +------------------------------------------------------------------------------- + +# [\#163 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/163) `open`: chore(admin): assign owner(s) for ML01 Input Validation Attack +**Labels**: `help wanted`, `documentation/risks` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 06:21](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/163): + +- [ ] Assigned Lead Contributor for ML01 +- [ ] Update CODEOWNERS with contributor details + +Ideally the Lead Contributor for ML01 will also be assigned to the cheatsheet @@ -503,6 +649,15 @@ At this stage the repo for https://mltop10.info is done manually because it need The rendering of EPUB and PDF at this stage is more critical then worrying about the mirroring portion IMHO. +#### [msnishanth9001](https://github.com/msnishanth9001) commented at [2023-10-30 06:46](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/129#issuecomment-1784575634): + +Hi @shsingh can you please assign me this issue. + +The intent is to do both fix mirror and formatting issues. Once the formatting issue is fixed the ePUB generation will be fixed. + +the following WF PR will publish ePUB and PDF. +- https://github.com/mltop10-info/mltop10.info/pull/4 + ------------------------------------------------------------------------------- diff --git a/issues/2023-10-20.129.pr.open.md b/issues/2023-10-20.129.pr.open.md index d6a7195..d05468c 100644 --- a/issues/2023-10-20.129.pr.open.md +++ b/issues/2023-10-20.129.pr.open.md @@ -32,6 +32,15 @@ At this stage the repo for https://mltop10.info is done manually because it need The rendering of EPUB and PDF at this stage is more critical then worrying about the mirroring portion IMHO. +#### [msnishanth9001](https://github.com/msnishanth9001) commented at [2023-10-30 06:46](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/129#issuecomment-1784575634): + +Hi @shsingh can you please assign me this issue. + +The intent is to do both fix mirror and formatting issues. Once the formatting issue is fixed the ePUB generation will be fixed. + +the following WF PR will publish ePUB and PDF. +- https://github.com/mltop10-info/mltop10.info/pull/4 + ------------------------------------------------------------------------------- diff --git a/issues/2023-10-30.159.issue.closed.md b/issues/2023-10-30.159.issue.closed.md new file mode 100644 index 0000000..2f97ca5 --- /dev/null +++ b/issues/2023-10-30.159.issue.closed.md @@ -0,0 +1,30 @@ +# [\#159 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/159) `closed`: chore: create issues for Top 10 owners and update CODEOWNERS +**Labels**: `issues/admin` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 05:27](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/159): + +- [x] Create issue for each Top 10 with a request for an owner +- [x] update CODEOWNERS with assigned owners + +#### [shsingh](https://github.com/shsingh) commented at [2023-10-30 06:50](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/159#issuecomment-1784579286): + +Update CODEOWNERS with sections for leads: #173 + +Issue for ML01: #163 +Issue for ML02: #164 +Issue for ML03: #165 +Issue for ML04: #166 +Issue for ML05: #167 +Issue for ML06: #168 +Issue for ML07: #169 +Issue for ML08: #170 +Issue for ML09: #171 +Issue for ML10: #172 + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.159.issue.open.md b/issues/2023-10-30.159.issue.open.md deleted file mode 100644 index 827bf11..0000000 --- a/issues/2023-10-30.159.issue.open.md +++ /dev/null @@ -1,17 +0,0 @@ -# [\#159 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/159) `open`: chore: create issues for Top 10 owners and update CODEOWNERS -**Labels**: `issues/admin` - - -#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 05:27](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/159): - -- [ ] Create issue for each Top 10 with a request for an owner -- [ ] update CODEOWNERS with assigned owners - - - - -------------------------------------------------------------------------------- - - - -[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.161.pr.merged.md b/issues/2023-10-30.161.pr.merged.md new file mode 100644 index 0000000..eadc491 --- /dev/null +++ b/issues/2023-10-30.161.pr.merged.md @@ -0,0 +1,33 @@ +# [\#161 PR](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/161) `merged`: shsingh/chore archive github issues + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 05:55](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/161): + +- chore: archive gh issues +- chore: archive gh issues + +- **For contributors:** + +- [ ] Have you followed the guidelines in our Contributing document? +- [ ] Have you checked to ensure there aren't other open [Pull Requests](../../../pulls) for the same update/change? +- [ ] Have you linted your Markdown locally before submission? + +- **Please check if the PR fulfills these requirements:** + +- [ ] The commit message follows our guidelines +- [ ] Docs have been added / updated (for issues and features) + +- **What kind of change does this PR introduce?** (Documentation Issue, Website Issue ...) + +- **Does this PR introduce a breaking change?** + +- **Other information**: + + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.162.pr.merged.md b/issues/2023-10-30.162.pr.merged.md new file mode 100644 index 0000000..fe1e825 --- /dev/null +++ b/issues/2023-10-30.162.pr.merged.md @@ -0,0 +1,36 @@ +# [\#162 PR](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/162) `merged`: merge: develop + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 05:58](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/162): + +- feat: create example cheatsheet reference for ML01 +- fix: update cheatsheet for ML01 +- merge: develop (#160) +- chore: archive gh issues +- chore: archive gh issues + +- **For contributors:** + +- [ ] Have you followed the guidelines in our Contributing document? +- [ ] Have you checked to ensure there aren't other open [Pull Requests](../../../pulls) for the same update/change? +- [ ] Have you linted your Markdown locally before submission? + +- **Please check if the PR fulfills these requirements:** + +- [ ] The commit message follows our guidelines +- [ ] Docs have been added / updated (for issues and features) + +- **What kind of change does this PR introduce?** (Documentation Issue, Website Issue ...) + +- **Does this PR introduce a breaking change?** + +- **Other information**: + + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.163.issue.open.md b/issues/2023-10-30.163.issue.open.md new file mode 100644 index 0000000..fd8ffe4 --- /dev/null +++ b/issues/2023-10-30.163.issue.open.md @@ -0,0 +1,19 @@ +# [\#163 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/163) `open`: chore(admin): assign owner(s) for ML01 Input Validation Attack +**Labels**: `help wanted`, `documentation/risks` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 06:21](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/163): + +- [ ] Assigned Lead Contributor for ML01 +- [ ] Update CODEOWNERS with contributor details + +Ideally the Lead Contributor for ML01 will also be assigned to the cheatsheet + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.164.issue.open.md b/issues/2023-10-30.164.issue.open.md new file mode 100644 index 0000000..1049b12 --- /dev/null +++ b/issues/2023-10-30.164.issue.open.md @@ -0,0 +1,19 @@ +# [\#164 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/164) `open`: chore(admin): assign owner(s) for ML02 Data Poisoning Attack +**Labels**: `help wanted`, `documentation/risks` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 06:24](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/164): + +- [ ] Assigned Lead Contributor for ML02 +- [ ] Update CODEOWNERS with contributor details + +Ideally the Lead Contributor for ML02 will also be assigned to the cheatsheet + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.165.issue.open.md b/issues/2023-10-30.165.issue.open.md new file mode 100644 index 0000000..a985acd --- /dev/null +++ b/issues/2023-10-30.165.issue.open.md @@ -0,0 +1,19 @@ +# [\#165 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/165) `open`: chore(admin): assign owner(s) for ML03 Model Inversion Attack +**Labels**: `help wanted`, `documentation/risks` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 06:25](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/165): + +- [ ] Assigned Lead Contributor for ML03 +- [ ] Update CODEOWNERS with contributor details + +Ideally the Lead Contributor for ML03 will also be assigned to the cheatsheet + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.166.issue.open.md b/issues/2023-10-30.166.issue.open.md new file mode 100644 index 0000000..1f023b3 --- /dev/null +++ b/issues/2023-10-30.166.issue.open.md @@ -0,0 +1,19 @@ +# [\#166 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/166) `open`: chore(admin): assign owner(s) for ML04 Membership Inference Attack +**Labels**: `help wanted`, `documentation/risks` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 06:26](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/166): + +- [ ] Assigned Lead Contributor for ML04 +- [ ] Update CODEOWNERS with contributor details + +Ideally the Lead Contributor for ML04 will also be assigned to the cheatsheet + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.167.issue.open.md b/issues/2023-10-30.167.issue.open.md new file mode 100644 index 0000000..0c2af89 --- /dev/null +++ b/issues/2023-10-30.167.issue.open.md @@ -0,0 +1,19 @@ +# [\#167 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/167) `open`: chore(admin): assign owner(s) for ML05 Model Stealing +**Labels**: `help wanted`, `documentation/risks` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 06:27](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/167): + +- [ ] Assigned Lead Contributor for ML05 +- [ ] Update CODEOWNERS with contributor details + +Ideally the Lead Contributor for ML05 will also be assigned to the cheatsheet + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.168.issue.open.md b/issues/2023-10-30.168.issue.open.md new file mode 100644 index 0000000..f19c7f2 --- /dev/null +++ b/issues/2023-10-30.168.issue.open.md @@ -0,0 +1,19 @@ +# [\#168 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/168) `open`: chore(admin): assign owner(s) for ML06 AI Supply Chain Attacks +**Labels**: `help wanted`, `documentation/risks` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 06:27](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/168): + +- [ ] Assigned Lead Contributor for ML06 +- [ ] Update CODEOWNERS with contributor details + +Ideally the Lead Contributor for ML06 will also be assigned to the cheatsheet + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.169.issue.open.md b/issues/2023-10-30.169.issue.open.md new file mode 100644 index 0000000..6e5558b --- /dev/null +++ b/issues/2023-10-30.169.issue.open.md @@ -0,0 +1,19 @@ +# [\#169 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/169) `open`: chore(admin): assign owner(s) for ML07 Transfer Learning Attack +**Labels**: `help wanted`, `documentation/risks` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 06:28](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/169): + +- [ ] Assigned Lead Contributor for ML07 +- [ ] Update CODEOWNERS with contributor details + +Ideally the Lead Contributor for ML07 will also be assigned to the cheatsheet + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.170.issue.open.md b/issues/2023-10-30.170.issue.open.md new file mode 100644 index 0000000..3e25b49 --- /dev/null +++ b/issues/2023-10-30.170.issue.open.md @@ -0,0 +1,19 @@ +# [\#170 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/170) `open`: chore(admin): assign owner(s) for ML08 Model Skewing +**Labels**: `help wanted`, `documentation/risks` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 06:29](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/170): + +- [ ] Assigned Lead Contributor for ML08 +- [ ] Update CODEOWNERS with contributor details + +Ideally the Lead Contributor for ML08 will also be assigned to the cheatsheet + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.171.issue.open.md b/issues/2023-10-30.171.issue.open.md new file mode 100644 index 0000000..2fac9a1 --- /dev/null +++ b/issues/2023-10-30.171.issue.open.md @@ -0,0 +1,19 @@ +# [\#171 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/171) `open`: chore(admin): assign owner(s) for ML09 Output Integrity Attack +**Labels**: `help wanted`, `documentation/risks` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 06:30](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/171): + +- [ ] Assigned Lead Contributor for ML09 +- [ ] Update CODEOWNERS with contributor details + +Ideally the Lead Contributor for ML09 will also be assigned to the cheatsheet + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.172.issue.open.md b/issues/2023-10-30.172.issue.open.md new file mode 100644 index 0000000..3af7c84 --- /dev/null +++ b/issues/2023-10-30.172.issue.open.md @@ -0,0 +1,19 @@ +# [\#172 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/172) `open`: chore(admin): assign owner(s) for ML10 Model Poisoning +**Labels**: `help wanted`, `documentation/risks` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 06:31](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/172): + +- [ ] Assigned Lead Contributor for ML10 +- [ ] Update CODEOWNERS with contributor details + +Ideally the Lead Contributor for ML10 will also be assigned to the cheatsheet + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.173.pr.merged.md b/issues/2023-10-30.173.pr.merged.md new file mode 100644 index 0000000..41aea0f --- /dev/null +++ b/issues/2023-10-30.173.pr.merged.md @@ -0,0 +1,20 @@ +# [\#173 PR](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/173) `merged`: chore: update CODEOWNERS + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 06:44](https://github.com/OWASP/www-project-machine-learning-security-top-10/pull/173): + +- feat: create example cheatsheet reference for ML01 +- fix: update cheatsheet for ML01 +- merge: develop (#160) +- chore: archive gh issues +- chore: archive gh issues +- chore: update CODEOWNERS + + + + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] diff --git a/issues/2023-10-30.174.issue.closed.md b/issues/2023-10-30.174.issue.closed.md new file mode 100644 index 0000000..bf45f9a --- /dev/null +++ b/issues/2023-10-30.174.issue.closed.md @@ -0,0 +1,18 @@ +# [\#174 Issue](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/174) `closed`: chore: create wiki page with help wanted sections +**Labels**: `issues/admin` + + +#### [shsingh](https://github.com/shsingh) opened issue at [2023-10-30 06:51](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/174): + +Create a wiki page outlining the current help wanted sections + +#### [shsingh](https://github.com/shsingh) commented at [2023-10-30 07:19](https://github.com/OWASP/www-project-machine-learning-security-top-10/issues/174#issuecomment-1784609343): + +wiki page: https://github.com/OWASP/www-project-machine-learning-security-top-10/wiki/Help-Wanted + + +------------------------------------------------------------------------------- + + + +[Export of Github issue for [OWASP/www-project-machine-learning-security-top-10](https://github.com/OWASP/www-project-machine-learning-security-top-10).] From 38c786e85c489a66c14f7d08c2a63df144b7cc80 Mon Sep 17 00:00:00 2001 From: Adit Nugroho Date: Mon, 30 Oct 2023 23:30:18 +1100 Subject: [PATCH 8/8] add entries to Glossary --- tab_glossary.md | 46 ++++++++++++++++++++++++++++++++++++---------- 1 file changed, 36 insertions(+), 10 deletions(-) diff --git a/tab_glossary.md b/tab_glossary.md index 7550ed5..ddaf5f8 100644 --- a/tab_glossary.md +++ b/tab_glossary.md @@ -56,7 +56,9 @@ tags: related-tag ## A {#a} -[]() + +[Adversarial attack](#adversarial_attack) +Type of attack which seeks to trick machine learning models into misclassifying inputs by maliciously tampering with input data ## B {#b} @@ -64,15 +66,21 @@ tags: related-tag ## C {#c} -[]() +[Classification](#classification) +Process of arranging things in groups which are distinct from each other, and are separated by clearly determined lines of demarcation ## D {#d} -[]() +[Data labeling](#data_labeling) +Process of assigning tags or categories to each data point in a dataset + +[Data poisoning](#data_poisoning) +Type of attack that inject poisoning samples into the data ## E {#e} -[]() +[Ensemble](#ensemble) +See: [Model Ensemble](#model_ensemble) ## F {#f} @@ -88,7 +96,11 @@ tags: related-tag ## I {#i} -[]() +[Intrusion Detection Systems (IDS)](#ids) +Security service that monitors and analyzes network or system events for the purpose of finding, and providing real-time or near real-time warning of, attempts to access system resources in an unauthorized manner. + +[Intrusion Prevention System (IPS)](#ips) +System that can detect an intrusive activity and can also attempt to stop the activity, ideally before it reaches its targets. ## J {#j} @@ -104,7 +116,14 @@ tags: related-tag ## M {#m} -[]() +[MLOps](#mlops) +The selection, application, interpretation, deployment, and maintenance of machine learning models within an AI-enabled system + +[Model](#model) +Detailed description or scaled representation of one component of a larger system that can be created, operated, and analyzed to predict actual operational characteristics of the final produced component + +[Model ensemble](#model_ensemble) +Art of combining a diverse set of learners (individual models) together to improvise on the stability and predictive power of the model ## N {#n} @@ -112,7 +131,11 @@ tags: related-tag ## O {#o} -[]() +[Obfuscation](#obfuscation) +Defense mechanism in which details of the model or training data are kept secret by adding a large amount of valid but useless information to a data store + +[Overfitting](#overfitting) +Overfitting is when a statistical model begins to describe the random error in the data rather than the relationships between variables. This occurs when the model is too complex ## P {#p} @@ -124,11 +147,13 @@ tags: related-tag ## R {#r} -[]() +[Regularisation](#regularisation) +Controlling model complexity by adding information in order to solve ill-posed problems or to prevent overfitting ## S {#s} -[]() +[Spam](#spam) +The abuse of electronic messaging systems to indiscriminately send unsolicited bulk messages ## T {#t} @@ -136,7 +161,8 @@ tags: related-tag ## U {#u} -[]() +[Underfitting](#underfitting) +Underfitting is when a data model is unable to capture the relationship between the input and output variables accurately, generating a high error rate on both the training set and unseen data ## V {#v}