genai-security-crosswalk 2.0.0

package/data/entries/LLM10.json

@@ -0,0 +1,763 @@
+{
+  "id": "LLM10",
+  "name": "Unbounded Consumption",
+  "source_list": "LLM-Top10-2025",
+  "version": "2026-Q1",
+  "severity": "Medium",
+  "aivss_score": null,
+  "audience": [
+    "red-teamer",
+    "security-engineer",
+    "developer",
+    "ml-engineer",
+    "ot-engineer",
+    "ciso",
+    "compliance",
+    "auditor"
+  ],
+  "mappings": [
+    {
+      "framework": "MITRE ATLAS",
+      "control_id": "AML.T0029",
+      "control_name": "Denial of ML Service",
+      "tier": "Foundational",
+      "scope": "Both",
+      "url": "https://atlas.mitre.org/techniques/AML.T0029",
+      "notes": "Overloading AI systems with computationally expensive inputs to cause service degradation"
+    },
+    {
+      "framework": "MITRE ATLAS",
+      "control_id": "AML.T0034",
+      "control_name": "Cost Harvesting",
+      "tier": "Foundational",
+      "scope": "Both",
+      "url": "https://atlas.mitre.org/techniques/AML.T0034",
+      "notes": "Crafting inputs that maximise token usage or API costs per request"
+    },
+    {
+      "framework": "NIST AI RMF 1.0",
+      "control_id": "MS-2.5",
+      "control_name": "Testing — adversarial",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Resource exhaustion and denial-of-service scenarios included in adversarial testing"
+    },
+    {
+      "framework": "NIST AI RMF 1.0",
+      "control_id": "MG-2.2",
+      "control_name": "Risk response",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Defined response to detected unbounded consumption events including rate limiting activation"
+    },
+    {
+      "framework": "NIST AI RMF 1.0",
+      "control_id": "MG-3.2",
+      "control_name": "Residual risk — availability",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Residual availability risk from resource exhaustion documented and treated"
+    },
+    {
+      "framework": "NIST AI RMF 1.0",
+      "control_id": "GV-1.7",
+      "control_name": "Policies for trustworthy AI",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Organisational policy defines resource limits and availability requirements for all LLM deployments"
+    },
+    {
+      "framework": "EU AI Act",
+      "control_id": "Availability risks identified and mitigated",
+      "control_name": "Art. 9 — Risk management",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Resource exhaustion and DoS scenarios included in risk management system"
+    },
+    {
+      "framework": "EU AI Act",
+      "control_id": "High-risk AI must remain available under adversarial conditions",
+      "control_name": "Art. 15 — Accuracy, robustness, cybersecurity",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Technical resilience against denial-of-service attacks is an Art. 15 requirement"
+    },
+    {
+      "framework": "EU AI Act",
+      "control_id": "Operational continuity procedures documented",
+      "control_name": "Art. 17 — Quality management",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Post-market monitoring and incident response for availability failures required"
+    },
+    {
+      "framework": "ISO/IEC 27001:2022",
+      "control_id": "A.8.16",
+      "control_name": "Monitoring activities",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Real-time monitoring of LLM resource consumption — cost anomaly detection and alerting"
+    },
+    {
+      "framework": "ISO/IEC 27001:2022",
+      "control_id": "A.5.30",
+      "control_name": "ICT readiness for business continuity",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM availability requirements in BCP — RTO/RPO defined, rate limiting as resilience control"
+    },
+    {
+      "framework": "ISO/IEC 27001:2022",
+      "control_id": "A.8.13",
+      "control_name": "Backup",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Backup and recovery for LLM service infrastructure — failover capability tested"
+    },
+    {
+      "framework": "ISO/IEC 27001:2022",
+      "control_id": "A.5.24",
+      "control_name": "Incident management",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Incident response procedures for LLM availability failures and cost overruns"
+    },
+    {
+      "framework": "ISO/IEC 42001:2023",
+      "control_id": "A.6.2.3",
+      "control_name": "AI system security",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Rate limiting and resource controls as AIMS security design requirements — enforced at deployment"
+    },
+    {
+      "framework": "ISO/IEC 42001:2023",
+      "control_id": "A.6.2.8",
+      "control_name": "Monitoring of AI systems",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Resource consumption monitored in operation — cost anomaly detection as AIMS monitoring control"
+    },
+    {
+      "framework": "ISO/IEC 42001:2023",
+      "control_id": "Cl.6.1",
+      "control_name": "Risk assessment",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Consumption risk in AI risk assessment — impact on service availability, cost exposure documented"
+    },
+    {
+      "framework": "ISO/IEC 42001:2023",
+      "control_id": "Cl.9",
+      "control_name": "Performance evaluation",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Resource consumption metrics in AIMS performance evaluation — consumption trends in management review"
+    },
+    {
+      "framework": "CIS Controls v8.1",
+      "control_id": "4.1 Establish secure configuration process",
+      "control_name": "CIS 4 — Secure Configuration",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Secure configuration includes resource limits — token caps, rate limits, cost budgets"
+    },
+    {
+      "framework": "CIS Controls v8.1",
+      "control_id": "12.6 Use of network-based URL filters",
+      "control_name": "CIS 12 — Network Infrastructure Management",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Rate limiting and traffic controls at the API gateway and network layer"
+    },
+    {
+      "framework": "CIS Controls v8.1",
+      "control_id": "17.1 Designate personnel for incident response",
+      "control_name": "CIS 17 — Incident Response",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Defined response for consumption anomalies — automated rate limiting, session suspension, alerting"
+    },
+    {
+      "framework": "OWASP ASVS 4.0.3",
+      "control_id": "V13.1.1",
+      "control_name": "Verify API rate limiting",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Rate limiting on all LLM API endpoints — per user, per session, per API key"
+    },
+    {
+      "framework": "OWASP ASVS 4.0.3",
+      "control_id": "V13.1.3",
+      "control_name": "Verify API rejects large unexpected payloads",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Token limits on LLM API inputs — requests exceeding limits rejected at the gateway"
+    },
+    {
+      "framework": "OWASP ASVS 4.0.3",
+      "control_id": "V11.1.4",
+      "control_name": "Verify business logic rate limits",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Business logic controls on LLM usage — per-tenant cost budgets, rate limit policies"
+    },
+    {
+      "framework": "OWASP ASVS 4.0.3",
+      "control_id": "V7.4.1",
+      "control_name": "Verify error handling does not expose sensitive data",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM resource exhaustion errors handled gracefully — no sensitive information in error responses"
+    },
+    {
+      "framework": "ISA/IEC 62443",
+      "control_id": "SR 7.6",
+      "control_name": "Denial of service protection",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM components protected against resource exhaustion attacks affecting OT availability"
+    },
+    {
+      "framework": "ISA/IEC 62443",
+      "control_id": "SR 7.7",
+      "control_name": "Control system backup",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM resource exhaustion cannot affect backup and recovery of OT control systems"
+    },
+    {
+      "framework": "ISA/IEC 62443",
+      "control_id": "SR 6.6",
+      "control_name": "Timely response to events",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Network monitoring detects and responds to LLM-related resource exhaustion before OT impact"
+    },
+    {
+      "framework": "NIST SP 800-82 Rev 3",
+      "control_id": "Denial of service attacks targeting OT availability",
+      "control_name": "Section 5.6 — DoS threats",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM-induced resource exhaustion as a DoS vector affecting shared OT network infrastructure"
+    },
+    {
+      "framework": "NIST SP 800-82 Rev 3",
+      "control_id": "Assess availability risks for OT systems",
+      "control_name": "Section 6.2 — Risk assessment",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM resource consumption impact assessed on shared OT network and compute infrastructure"
+    },
+    {
+      "framework": "NIST SP 800-82 Rev 3",
+      "control_id": "Network architecture preventing DoS propagation",
+      "control_name": "Section 7.2 — Network segmentation",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM infrastructure isolated from OT control network — bandwidth caps at DMZ boundary"
+    },
+    {
+      "framework": "NIST SP 800-82 Rev 3",
+      "control_id": "Title",
+      "control_name": "Control",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Application"
+    },
+    {
+      "framework": "NIST SP 800-82 Rev 3",
+      "control_id": "Denial of Service Protection",
+      "control_name": "SC-5",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM infrastructure protected against resource exhaustion attacks affecting OT availability"
+    },
+    {
+      "framework": "NIST SP 800-82 Rev 3",
+      "control_id": "Fail-Safe Procedures",
+      "control_name": "SI-17",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM service degradation has defined fail-safe behaviour — process control continues without LLM"
+    },
+    {
+      "framework": "NIST SP 800-82 Rev 3",
+      "control_id": "Audit Record Generation",
+      "control_name": "AU-12",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM resource consumption logged — patterns indicating exhaustion attacks detectable"
+    },
+    {
+      "framework": "NIST CSF 2.0",
+      "control_id": "PR.IR-01",
+      "control_name": "Infrastructure Resilience",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Networks and environments protected to achieve resilience — rate limiting and resource controls as resilience measures"
+    },
+    {
+      "framework": "NIST CSF 2.0",
+      "control_id": "DE.CM-01",
+      "control_name": "Continuous Monitoring",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM resource consumption monitored — anomalous usage patterns detected and alerted"
+    },
+    {
+      "framework": "NIST CSF 2.0",
+      "control_id": "RS.MI-01",
+      "control_name": "Incident Mitigation",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Incidents contained — automated rate limiting, circuit breakers, cost budgets as containment controls"
+    },
+    {
+      "framework": "NIST CSF 2.0",
+      "control_id": "GV.RM-01",
+      "control_name": "Risk Management Strategy",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Risk management strategy established — LLM availability requirements and acceptable consumption risk defined"
+    },
+    {
+      "framework": "SOC 2",
+      "control_id": "LLM service availability commitments documented — SLAs, RTO/RPO, resource limits that protect availability",
+      "control_name": "A1.1 — Availability policies",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "SOC 2",
+      "control_id": "Rate limiting and resource controls protect LLM service availability — implemented and monitored",
+      "control_name": "A1.2 — Environmental protections",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "SOC 2",
+      "control_id": "Real-time monitoring of LLM resource consumption — cost anomalies and unusual volume patterns alerted",
+      "control_name": "CC7.2 — Anomaly detection",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "SOC 2",
+      "control_id": "Resource exhaustion risks identified in LLM risk assessment — DoS and sponge attack vectors assessed",
+      "control_name": "CC3.2 — Risk assessment",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "PCI DSS v4.0",
+      "control_id": "Req 1.3.2",
+      "control_name": "Network security controls",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Network controls restrict inbound traffic to CDE — rate limiting at network layer for LLM applications"
+    },
+    {
+      "framework": "PCI DSS v4.0",
+      "control_id": "Req 6.4.1",
+      "control_name": "Public-facing application protection",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM-powered public-facing applications protected against DoS — rate limiting and payload limits enforced"
+    },
+    {
+      "framework": "PCI DSS v4.0",
+      "control_id": "Req 10.6.1",
+      "control_name": "Audit log review",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Automated monitoring for resource exhaustion patterns — unusual consumption volumes alerted"
+    },
+    {
+      "framework": "PCI DSS v4.0",
+      "control_id": "Req 12.3.2",
+      "control_name": "Targeted risk analysis",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Targeted risk analysis for LLM availability in CDE — DoS impact on payment processing, controls documented"
+    },
+    {
+      "framework": "ENISA Multilayer Framework",
+      "control_id": "L1",
+      "control_name": "General ICT — Availability",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Rate limiting and resource controls as L1 availability practices — LLM infrastructure protected against exhaustion"
+    },
+    {
+      "framework": "ENISA Multilayer Framework",
+      "control_id": "MON",
+      "control_name": "Monitoring and Detection",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM resource consumption monitored — cost anomaly detection as ENISA monitoring practice"
+    },
+    {
+      "framework": "ENISA Multilayer Framework",
+      "control_id": "L1",
+      "control_name": "Incident Response (IRS)",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Incident response for consumption anomalies — automated rate limiting, circuit breakers, cost budgets"
+    },
+    {
+      "framework": "ENISA Multilayer Framework",
+      "control_id": "L2",
+      "control_name": "Governance and Risk (GOV)",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "LLM availability in risk management — RTO/RPO defined, consumption risk in AI risk register"
+    },
+    {
+      "framework": "OWASP SAMM v2.0",
+      "control_id": "D-SR",
+      "control_name": "Security Requirements",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Rate limiting and resource caps as security requirements — specified before LLM infrastructure deployment"
+    },
+    {
+      "framework": "OWASP SAMM v2.0",
+      "control_id": "I-SD",
+      "control_name": "Secure Deployment",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Rate limiting and resource controls deployed with every LLM deployment — not optional post-deployment hardening"
+    },
+    {
+      "framework": "OWASP SAMM v2.0",
+      "control_id": "O-IM",
+      "control_name": "Incident Management",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Consumption anomaly detection as incident management control — automated response, escalation procedure"
+    },
+    {
+      "framework": "OWASP SAMM v2.0",
+      "control_id": "O-EM",
+      "control_name": "Environment Management",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Resource limits as environment configuration — documented, version-controlled, reviewed on change"
+    },
+    {
+      "framework": "STRIDE",
+      "control_id": "D",
+      "control_name": "Resource Exhaustion (Denial of Service)",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "CWE/CVE",
+      "control_id": "CWE-400",
+      "control_name": "CWE-400",
+      "tier": "Foundational",
+      "scope": "Both",
+      "url": "https://cwe.mitre.org/data/definitions/400.html"
+    },
+    {
+      "framework": "CWE/CVE",
+      "control_id": "CWE-770",
+      "control_name": "CWE-770",
+      "tier": "Foundational",
+      "scope": "Both",
+      "url": "https://cwe.mitre.org/data/definitions/770.html"
+    },
+    {
+      "framework": "CWE/CVE",
+      "control_id": "CWE-799",
+      "control_name": "CWE-799",
+      "tier": "Foundational",
+      "scope": "Both",
+      "url": "https://cwe.mitre.org/data/definitions/799.html"
+    },
+    {
+      "framework": "OWASP AI Testing Guide",
+      "control_id": "Resource exhaustion and rate limiting",
+      "control_name": "AVT — Availability",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Test rate limiting enforcement, token budget controls, and compute throttling under load; verify graceful degradation"
+    },
+    {
+      "framework": "OWASP AI Testing Guide",
+      "control_id": "Consumption anomaly detection",
+      "control_name": "LMT — Logging & Monitoring",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Verify monitoring detects abnormal consumption patterns — token flooding, API abuse, wallet drainage — before service impact"
+    },
+    {
+      "framework": "OWASP AI Testing Guide",
+      "control_id": "Per-user quota enforcement",
+      "control_name": "ACT — Access Control",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Verify per-user and per-tenant quotas are enforced and cannot be bypassed through session switching or credential abuse"
+    },
+    {
+      "framework": "MAESTRO",
+      "control_id": "L4",
+      "control_name": "Deployment & Infrastructure",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "MAESTRO",
+      "control_id": "L3",
+      "control_name": "Agent Frameworks",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "MAESTRO",
+      "control_id": "L5",
+      "control_name": "Evaluation & Observability",
+      "tier": "Foundational",
+      "scope": "Both"
+    },
+    {
+      "framework": "AIUC-1",
+      "control_id": "D",
+      "control_name": "Reliability domain (all)",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Foundational"
+    },
+    {
+      "framework": "AIUC-1",
+      "control_id": "B006",
+      "control_name": "Prevent unauthorized AI actions",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Foundational"
+    },
+    {
+      "framework": "AIUC-1",
+      "control_id": "E",
+      "control_name": "Accountability domain",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Foundational"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "Single credential with access to multiple services — one exhaustion affects all",
+      "control_name": "NHI-5 Over-Privileged NHI",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Separate credentials per service with independent quotas"
+    },
+    {
+      "framework": "OWASP NHI Top 10",
+      "control_id": "Shared credential used across services — quota exhaustion in one affects all",
+      "control_name": "NHI-9 NHI Reuse",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Separate credentials per integration"
+    },
+    {
+      "framework": "NIST SP 800-218A",
+      "control_id": "PW.2.1-PS",
+      "control_name": "Design software — resource and throttling requirements",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Define token limits, rate limits, and cost budgets as explicit security design requirements for all AI inference services; document in design specifications"
+    },
+    {
+      "framework": "NIST SP 800-218A",
+      "control_id": "PW.8.2-PS",
+      "control_name": "Test for security vulnerabilities — load and adversarial consumption testing",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Conduct adversarial resource consumption testing (sponge examples, token amplification, recursive context injection) before each production release"
+    },
+    {
+      "framework": "NIST SP 800-218A",
+      "control_id": "RV.2.1-PS",
+      "control_name": "Assess, prioritise, and remediate — availability remediation",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Define and test remediation procedures for availability incidents — rate limit tightening, model rollback, cost circuit breaker activation"
+    },
+    {
+      "framework": "NIST SP 800-218A",
+      "control_id": "PS.2.1-PS",
+      "control_name": "Verify software integrity — throttle and limit configuration integrity",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Verify that rate limit and resource constraint configurations have not been altered before deployment; treat throttle configuration as a security artefact"
+    },
+    {
+      "framework": "FedRAMP",
+      "control_id": "SC-7",
+      "control_name": "Boundary Protection — rate limiting and cost controls",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Enforce rate limiting, token quotas, and cost circuit breakers at the AI service boundary; define per-user and per-session consumption limits"
+    },
+    {
+      "framework": "FedRAMP",
+      "control_id": "SI-4",
+      "control_name": "System Monitoring — consumption anomaly detection",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Monitor AI service consumption metrics — tokens, latency, cost — in real time; alert and auto-mitigate on consumption anomalies"
+    },
+    {
+      "framework": "FedRAMP",
+      "control_id": "CM-7",
+      "control_name": "Least Functionality — resource budget enforcement",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Restrict AI services to defined resource budgets; disable unnecessary model capabilities; enforce compute and cost limits in configuration"
+    },
+    {
+      "framework": "FedRAMP",
+      "control_id": "IR-4",
+      "control_name": "Incident Handling — consumption incident response",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Define incident handling procedures for AI consumption anomalies including automatic throttling, service suspension, and cost cap enforcement"
+    },
+    {
+      "framework": "DORA",
+      "control_id": "Art. 9",
+      "control_name": "Protection and Prevention — consumption controls",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Implement rate limiting, token quotas, and cost circuit breakers on financial AI inference services; define per-user and per-service consumption limits"
+    },
+    {
+      "framework": "DORA",
+      "control_id": "Art. 10",
+      "control_name": "Detection — consumption anomaly detection",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Monitor AI service consumption metrics in real time; alert on token spikes, latency degradation, and cost overruns affecting financial service availability"
+    },
+    {
+      "framework": "DORA",
+      "control_id": "Art. 12",
+      "control_name": "Backup Policies — AI service continuity",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Maintain backup model deployments and fallback inference paths for AI services supporting critical financial functions; test restoration procedures"
+    },
+    {
+      "framework": "DORA",
+      "control_id": "Art. 11",
+      "control_name": "Response and Recovery — consumption incident response",
+      "tier": "Foundational",
+      "scope": "Both",
+      "notes": "Define response and recovery procedures for AI consumption incidents; include automatic throttling, failover activation, and service restoration"
+    }
+  ],
+  "tools": [
+    {
+      "name": "Kong Gateway",
+      "type": "open-source",
+      "url": "https://github.com/Kong/kong"
+    },
+    {
+      "name": "Nginx (rate limiting)",
+      "type": "open-source",
+      "url": "https://nginx.org"
+    },
+    {
+      "name": "LiteLLM",
+      "type": "open-source",
+      "url": "https://github.com/BerriAI/litellm"
+    },
+    {
+      "name": "OpenTelemetry",
+      "type": "open-source",
+      "url": "https://opentelemetry.io"
+    },
+    {
+      "name": "Claroty",
+      "type": "commercial",
+      "url": "https://claroty.com"
+    },
+    {
+      "name": "Nozomi Networks",
+      "type": "commercial",
+      "url": "https://www.nozominetworks.com"
+    },
+    {
+      "name": "LiteLLM (rate limiting)",
+      "type": "open-source",
+      "url": "https://github.com/BerriAI/litellm"
+    },
+    {
+      "name": "AWS Budgets / Azure Cost Management",
+      "type": "commercial",
+      "url": "https://aws.amazon.com/aws-cost-management/aws-budgets/"
+    },
+    {
+      "name": "Inspect AI",
+      "url": "https://github.com/UKGovernmentBEIS/inspect_ai",
+      "type": "open-source"
+    }
+  ],
+  "incidents": [
+    {
+      "name": "Clarkesworld magazine overwhelmed by AI-generated fiction submissions",
+      "url": "https://github.com/emmanuelgjr/GenAI-Security-Crosswalk/blob/main/data/incidents.json",
+      "year": 2023,
+      "incident_id": "INC-014"
+    },
+    {
+      "name": "AutoGPT and BabyAGI — uncontrolled web browsing and file system access",
+      "url": "https://github.com/emmanuelgjr/GenAI-Security-Crosswalk/blob/main/data/incidents.json",
+      "year": 2023,
+      "incident_id": "INC-017"
+    },
+    {
+      "name": "AI voice deepfake CEO fraud — Hong Kong $25M loss",
+      "url": "https://github.com/emmanuelgjr/GenAI-Security-Crosswalk/blob/main/data/incidents.json",
+      "year": 2024,
+      "incident_id": "INC-026"
+    },
+    {
+      "name": "Anthropic Claude context flooding — resource exhaustion via adversarial long-context prompts",
+      "url": "https://github.com/emmanuelgjr/GenAI-Security-Crosswalk/blob/main/data/incidents.json",
+      "year": 2024,
+      "incident_id": "INC-045"
+    }
+  ],
+  "crossrefs": {
+    "llm_top10": [
+      "LLM01",
+      "LLM06",
+      "LLM07",
+      "LLM02",
+      "LLM05",
+      "LLM03",
+      "LLM04",
+      "LLM08",
+      "LLM09"
+    ],
+    "agentic_top10": [
+      "ASI08",
+      "ASI10"
+    ],
+    "dsgai_2026": [
+      "DSGAI17"
+    ]
+  },
+  "changelog": [
+    {
+      "date": "2026-03-27",
+      "version": "1.0.0",
+      "change": "Initial entry — generated from GenAI Security Crosswalk v1.5.1 mapping files",
+      "author": "emmanuelgjr"
+    }
+  ]
+}