## 3 Methodology
### Implementation
Leveraging advanced semantic reasoning capabilities, our framework facilitates the automated assessment of these applications. Moreover, through experimental performance benchmarks with our framework, we not only showcased its practical feasibility but also revealed that the computational impact of employing sophisticated ontology reasoners is within acceptable bounds. As next steps, we plan to continually expand the knowledge base with new attacks and defenses found in the scientific literature. Other application areas we aim to include are the MITRE ATT&CK knowledge bases and threat matrices for Mobile and Industrial Control Systems (ICSs), especially when they cover AI-related threats and defenses [31; 32]. Additionally, we plan to enhance the front end of our framework, offering an enriched user interface akin to well-known threat navigator dashboards. This continuous process ensures that the knowledge base behind our framework remains up-to-date, adaptable, and accessible in a user-friendly manner in an ever-evolving landscape of cybersecurity threats and defenses of AI-enabled systems and applications. Conceptualization, methodology, software, and validation, D.P. ; writing--original draft preparation, D.P. ; writing--review and editing, D.P. ; supervision, D.P. and W.J. ; project administration, D.P. ; funding acquisition, W.J. All authors have read and agreed to the published version of the manuscript. This research is partially funded by the Research Fund KU Leuven and by the Flemish Research Programme Cybersecurity. Work for this paper was supported by the European Commission through the Horizon Europe project KINAITICS ([[https://kinaities.eu/](https://kinaities.eu/)]([https://kinaities.eu/](https://kinaities.eu/)) (accessed on 23 January 2024)) under grant agreement 1010/0176. The data presented in this study are available in this article. The authors declare no conflicts of interest. ## Appendix A Processing the STIX 2.1 Knowledge Base with Python

Listings A1 and A2 show how to process STIX 2.0 JSON files, respectively, with the Python stix2 (version 3.0.1) package and the Python mitreattack-python (version 3.0.2) package. ```
1 fromstix2 importMemoryStore
2 fromstix2 importFilter
3
4 src=MemoryStore()
5 src.load.from.file(\"enterprise-attack/enterprise-attack-14.1.json\")
6 tll1=src.query([ Filter(\"external_references.external_id\", \"=\", \"T1111\"),
7 Filter(\"type\", \"=\", \"attack-pattern\")][0]
8 print(tll11)
```
Listing A2 Processing the ATT&CK (version 14.1) Enterprise knowledge base in STIX format with the mitreattack-python (version 3.0.2) instead of the stix2 (version 3.0.1) package. ```
1 frommiteattack.stix20 importMiteAttackData
2
3 mite_attack_data=MiteAttackData(\"enterprise-attack/enterprise-attack-14.1.json\")
4 forattack_patterninmite_attack_data.get_objects_by_type(\"attack-pattern\"):
5 forexternal_referenceinattack_pattern[\"external_references\"]:
6 if\"external_id\"inexternal_referenceandexternal_reference[\"external_id\"]==\"T1111\":
7 tll1=attack_pattern
8 break
9 print(tll11)
```
Listing A3, A4, and A5 respectively depict a tactic, technique, and mitigation from the MITRE ATLAS knowledge base in YAML format. ## Appendix B YAML Representation of ATLAS Tactics, Techniques, and Mitigations

Listings A3, A4, and A5 respectively depict a tactic, technique, and mitigation from the MITRE ATLAS knowledge base in YAML format. ```
1 id:AML.TA0002
2 name:Reconnaissanceobject-type:tacticATTSCK-reference:id:TA0043 url:[[https://attack.mitre.org/tactics/TA0043/](https://attack.mitre.org/tactics/TA0043/)]([https://attack.mitre.org/tactics/TA0043/](https://attack.mitre.org/tactics/TA0043/))
3 description: 'The adversary is trying to gather information about the machine learning system they can use to plan future operations. 4
5 Reconnaissanceconsists of techniques that involve adversaries actively or passively gathering information that can be used to support targeting. 6
7 Such information may include details of the victim organization's machine learning capabilities and research efforts.