genai-security-crosswalk 2.0.0

package/data/incidents-schema.json

@@ -0,0 +1,121 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://github.com/emmanuelgjr/GenAI-Security-Crosswalk/blob/main/data/incidents-schema.json",
+  "title": "GenAI Security Crosswalk — Incident Database Schema",
+  "description": "Schema for real-world AI security incidents, mapped to OWASP entries and MAESTRO layers",
+  "type": "object",
+  "required": ["version", "generated", "incidents"],
+  "properties": {
+    "version":   { "type": "string" },
+    "generated": { "type": "string", "format": "date" },
+    "incidents": {
+      "type": "array",
+      "items": { "$ref": "#/definitions/Incident" }
+    }
+  },
+  "definitions": {
+    "Incident": {
+      "type": "object",
+      "required": ["id", "title", "date", "description", "owasp_entries", "maestro_layers", "attack_vector", "impact", "severity"],
+      "additionalProperties": false,
+      "properties": {
+        "id": {
+          "type": "string",
+          "pattern": "^INC-\\d{3}$",
+          "description": "Unique incident identifier"
+        },
+        "title": {
+          "type": "string",
+          "description": "Short descriptive title"
+        },
+        "date": {
+          "type": "string",
+          "pattern": "^\\d{4}(-\\d{2})?$",
+          "description": "YYYY or YYYY-MM of incident discovery/disclosure"
+        },
+        "year": {
+          "type": "integer",
+          "description": "Year for easy filtering"
+        },
+        "category": {
+          "type": "string",
+          "enum": ["real-world", "research-demonstrated", "red-team"],
+          "description": "Whether this is a confirmed real-world incident, researcher-demonstrated attack, or red-team finding"
+        },
+        "description": {
+          "type": "string",
+          "description": "What happened, how it was discovered, and what the outcome was"
+        },
+        "owasp_entries": {
+          "type": "array",
+          "items": { "type": "string", "pattern": "^(LLM|ASI|DSGAI)\\d{2}$" },
+          "minItems": 1,
+          "description": "OWASP entry IDs this incident exemplifies"
+        },
+        "maestro_layers": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": ["layer", "role"],
+            "properties": {
+              "layer": {
+                "type": "string",
+                "enum": ["L1", "L2", "L3", "L4", "L5", "L6", "L7"],
+                "description": "MAESTRO layer ID"
+              },
+              "label": {
+                "type": "string",
+                "description": "MAESTRO layer human name"
+              },
+              "role": {
+                "type": "string",
+                "enum": ["origin", "propagation", "impact", "blind-spot"],
+                "description": "How this layer is involved: origin=where attack starts, propagation=how it spreads, impact=where harm manifests, blind-spot=where detection failed"
+              },
+              "notes": {
+                "type": "string"
+              }
+            }
+          }
+        },
+        "attack_vector": {
+          "type": "string",
+          "description": "Technical mechanism of the attack"
+        },
+        "affected": {
+          "type": "string",
+          "description": "System, organisation, or product affected"
+        },
+        "impact": {
+          "type": "string",
+          "description": "Actual or potential harm caused"
+        },
+        "severity": {
+          "type": "string",
+          "enum": ["Critical", "High", "Medium", "Low"]
+        },
+        "mitigations": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "Controls that would prevent or contain this incident"
+        },
+        "references": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": ["title", "url"],
+            "properties": {
+              "title": { "type": "string" },
+              "url":   { "type": "string", "format": "uri" },
+              "type":  { "type": "string", "enum": ["news", "research", "advisory", "disclosure", "legal"] }
+            }
+          }
+        },
+        "tags": {
+          "type": "array",
+          "items": { "type": "string" }
+        }
+      }
+    }
+  }
+}