STRIFE: A Socio-Technical Framework for Threat Modeling of Artificial Intelligence Systems

Due to the rapidly growing adoption of artificial intelligence (AI) technology, there has been an increased focus in recent times on the opportunities and perils of AI use. The authors propose STRIFE, a novel socio-technical threat modeling framework which combines technical, ethical, and legal dimensions to proactively identify and address negative and unintended consequences of AI systems. A second contribution of this inquiry is to enable the use of the National Institute of Standards and Technology AI Risk Management Framework to perform threat modeling in conjunction with STRIFE. By addressing AI threats using socio-technical considerations throughout the AI lifecycle, organizations can better engage with their societal stakeholders in managing the risks associated with AI systems. For these reasons, this study is expected to benefit academics, practitioners, and industry as a whole.