Tag
#methodology
6 posts tagged methodology.
- news
Reconstructing an Incident Timeline From Primary Sources
A vendor advisory, a CVE record, a regulator filing, and a researcher's blog post all date the same event differently.
- news
An Incident-Response Playbook for AI Systems
Generic IR runbooks assume the failing component is a server you can patch. AI incidents add a model whose behavior you can't fully explain.
- news
Taxonomy: Incident vs. Vulnerability vs. Disclosure vs. Misuse
Four terms used interchangeably in AI security reporting, but each describes a different event and triggers a different response. This is the working taxonomy.
- news
Source Verification Across Tiers: How an Beat Vets a Claim
The five-tier source ladder used to verify AI security incidents, with worked examples of when a single tweet was enough and when ten reposts still weren't.
- news
Why We Don't Do Attribution Speculation on AI Incidents
Attribution is the slowest, hardest, most consequential call in incident reporting. Here's the policy that keeps us from getting it wrong.
- news
How We Log AI Security Incidents: Our Methodology
The methodology behind AI Incidents — how we verify sources, date-stamp claims, and decide what's news vs noise in the AI security incident beat.