Standards

New free RAID-AI framework helps businesses measure resilience to ransomware targeting AI systems

The Ransomware Assessment and Incident Defense Framework for AI Systems (RAID-AI), developed over two years by Behnaz Karimi and Yuvaraj Govindarajulu, co-leads of OWASP's AI Bill of Materials initiative, is now freely available online for anyone to use. Its approach is hands-on, asking security teams to assess their own controls rather than connecting the tool to their systems for scanning. Karimi said the framework covers ransomware attacks against AI systems regardless of whether the attacker itself uses AI, citing data-poisoning techniques and an alleged June attack on Novo Nordisk in which hackers claimed to have stolen the pharmaceutical company's AI models. For a business relying on AI models for critical operations, the framework offers, for the first time, a concrete checklist instead of general recommendations.

Sources

This summary was written automatically with AI from the public sources listed above and checked by an independent AI reviewer before publication. For full details, read the original source.

← All recent stories

Does any of this affect you?

If you run a chatbot, AI agent, or AI tools in your business, the Shielding Audit shows where you're exposed under the EU AI Act and security — with prioritization. Starts with a free 45-minute session.

Book a free session