Behnaz Karimi, co-lead of the OWASP AI Bill of Materials (AIBOM) initiative, developed a new framework called the Ransomware Assessment and Incident Defense Framework for AI Systems (RAID-AI), according to Infosecurity Magazine. Karimi built the tool over two years with Yuvaraj Govindarajulu, also a co-lead at OWASP AIBOM. The framework is free to use online.
The team planned to introduce RAID-AI at the ISC2 Security Congress in Denver, Colorado, held October 26 to 28. Visa issues prevented Karimi from attending.
Karimi told Infosecurity that RAID-AI focuses on ransomware attacks against AI systems, whether or not an attacker uses AI. She said the approach asks security teams to assess their own controls rather than connecting to or scanning their systems. "Right now, we are slowly seeing that ransomware attacks targeting AI systems are happening," she said.
Karimi pointed to an April 2025 report by Zoran Mitrovic, head of engineering at Kintra Health, which described ransomware actors using data poisoning techniques. She also cited an alleged cyberattack on Nov