A security engineer is implementing threat modeling for a new Azure AI Foundry application using the STRIDE methodology. The engineering team is concerned that an attacker could submit specially crafted inputs that cause the AI model to produce outputs bypassing the organization's safety guidelines. Which STRIDE category does this threat fall under?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — d is correct because prompt injection attacks that bypass an AI model's safety guidelines represent an Elevation of Privilege threat in the STRIDE model. The attacker gains capabilities (producing unsafe, policy-violating outputs) that the system is designed to prevent, effectively elevating their privileges beyond what the system's access controls and content policies intend to permit.
Full explanation below image
Full Explanation
D is correct because prompt injection attacks that bypass an AI model's safety guidelines represent an Elevation of Privilege threat in the STRIDE model. The attacker gains capabilities (producing unsafe, policy-violating outputs) that the system is designed to prevent, effectively elevating their privileges beyond what the system's access controls and content policies intend to permit. B is incorrect because Tampering in STRIDE refers to unauthorized modification of data or system state; while prompt injection manipulates inputs, the primary threat is the escalated capability achieved (bypassing safety controls), making EoP the more precise categorization. A is incorrect because Spoofing involves impersonating another identity; prompt injection attacks do not require identity impersonation. C is incorrect because Repudiation concerns whether actions can be denied/attributed; prompt injection's primary threat is the capability bypass, not the ability to deny the action.