Introduction
A Vulnerability Assessment helps identify and address weaknesses within an AI System. This process is tied to the Cranium platform's Bill of Materials (BOM) and AI Arena, leveraging detailed component inventories and model penetration tests to uncover potential risks. The platform generates insights into known vulnerabilities and weaknesses by examining the software, dependencies, and configurations listed in the BOM, helping organizations proactively mitigate threats. This guide will walk you through accessing a Vulnerability Assessment from the Bill of Materials and the AI System Manager pages.
Access via Bill of Materials
Navigate to the Bill of Materials List
To access a Vulnerability Assessment, start by navigating to the Bill of Materials List. In the navigation drawer, click the Artifacts section, then select Bill of Materials.
Access the Vulnerability Assessment
The Cranium platform automatically conducts a Vulnerability Assessment once a Bill of Materials is generated. In the Bill of Materials List, either create a new Bill of Materials or locate an existing Bill of Materials that you want to assess. Once located, take note of the BOM name. Next, navigate to the Vulnerability Assessment Tab. The vulnerabilities list is empty when you first visit the Vulnerability Assessment tab. Use the Artifact dropdown to select a Bill of Materials by name. Once selected, the BOM's Vulnerability Assessment and associated metadata will populate the Vulnerabilities List. Use the Models, Technologies, and Other Vulnerabilities tabs to view each category's discovered vulnerabilities and weaknesses.
Access via AI System Manager
Navigate to the AI System for Assessment
To access a Vulnerability Assessment, start by navigating to the AI System you want to assess. In the navigation drawer, click the AI Manager section, then select My AI Systems. Locate the AI System for assessment and click the View Details button.
Access the Vulnerability Assessment
The Cranium platform automatically conducts a Vulnerability Assessment once a Bill of Materials is generated. In the Artifacts Overview, either add a Bill of Materials as an artifact or locate an existing Bill of Materials you want to assess. Once located, take note of the BOM name. Next, navigate to the Vulnerability Assessment Tab. If you have more than one BOM attached to the AI System, the vulnerabilities list will be empty when you first visit the Vulnerability Assessment tab. Use the Artifact dropdown to select a Bill of Materials by name. Once selected, The BOM's Vulnerability Assessment and associated metadata will populate the Vulnerabilities List. Use the Models, Technologies, and Other Vulnerabilities tabs to view each category's discovered vulnerabilities and weaknesses.