Custom Taxonomies

Using the MISP format allows us to seamlessly integrate arbitrary taxonomies into the AVID database and related workflows. This is crucial for practitioner adoption, since AI developers and vendors often work with operational taxonomies specific to their domain. Examples of such deep taxonomies/categorizations include MITRE ATLAS, taxonomies for downstream harms and LLM risks, and Risk Cards.

Auxiliary Taxonomies in avid-schema

The following non-AVID taxonomies are currently maintained in avid-schema/taxonomy:

• InjectLab LLM Taxonomy (injectlab-llm.json): categorizes LLM prompt-injection and jailbreak behaviors.

• Risk Cards (risk-cards.json): captures deployment-time risk dimensions used in Risk Cards style assessments.

• Trail of Bits ODDs (trail-of-bits-ODDs.json): represents Operational Design Domain constraints and assumptions for AI systems.

We welcome community contributions to the taxonomy repository. To contribute, add a JSON file following the MISP structure and open a pull request in avid-schema.