arXiv: Validating Threat Modeling Results with the Help of Vulnerable Test Applications

This paper, published on arXiv, presents a novel methodology for validating the results of threat modeling exercises by using deliberately vulnerable test applications. Rather than relying solely on theoretical analysis or expert review, the approach proposes a practical, empirical validation step where threat models are tested against known vulnerabilities in controlled environments. This shifts threat modeling from a purely documentation exercise to a more measurable, evidence-based process, aligning with the principles of the AI Safety framework by emphasizing verifiable security outcomes.

The primary audience for this work includes organizations developing or deploying AI systems, particularly those in regulated sectors such as finance, healthcare, and critical infrastructure. Compliance teams in these sectors, especially those subject to the EU AI Act or similar frameworks, will find this relevant as it offers a concrete method to demonstrate that threat models are not just complete but also effective. It also impacts security engineers and risk managers who are responsible for validating security controls in AI pipelines.

Compliance teams should review this methodology to assess its applicability to their existing threat modeling processes. They should consider piloting the use of vulnerable test applications to validate at least one high-risk AI system’s threat model. Additionally, teams should update their internal validation procedures to include empirical testing where feasible, and document these tests as part of their AI safety and risk management evidence. This will strengthen audit readiness and demonstrate a proactive, evidence-based approach to regulatory compliance.