{
 "license": "CC-BY-4.0",
 "attribution": "Fide AI, Agentic Cyber Explorer",
 "url": "https://agentic-cyber-explorer.pages.dev/events/nist-ai-100-2-e2023-aml-taxonomy-2024/",
 "asOf": "2026-09-26",
 "id": "nist-ai-100-2-e2023-aml-taxonomy-2024",
 "date": "2024-01-04",
 "datePrecision": "day",
 "title": "NIST publishes adversarial machine learning taxonomy covering direct and indirect prompt injection",
 "lane": "policy",
 "kind": "standard",
 "summary": "NIST released the final NIST AI 100-2 E2023 report, a taxonomy and terminology of attacks on and mitigations for machine learning systems. Its generative AI chapter includes separate sections on direct prompt injection and indirect prompt injection, but no dedicated section on agents.",
 "whyItMatters": "It established the US government vocabulary for prompt injection that later agent security guidance and evaluations reuse.",
 "actors": [
  "nist"
 ],
 "topics": [
  "standards-and-guidance",
  "prompt-injection"
 ],
 "atlas": [
  "untrusted-content",
  "model"
 ],
 "artifacts": [],
 "sources": [
  {
   "url": "https://csrc.nist.gov/pubs/ai/100/2/e2023/final",
   "publisher": "NIST",
   "title": "Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations (NIST AI 100-2 E2023)",
   "date": "2024-01-04",
   "type": "primary",
   "accessed": "2026-09-25"
  },
  {
   "url": "https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.100-2e2023.pdf",
   "publisher": "NIST",
   "title": "NIST AI 100-2 E2023 (PDF)",
   "date": "2024-01-04",
   "type": "primary",
   "accessed": "2026-09-25"
  }
 ],
 "keyFacts": [
  {
   "fact": "The E2023 edition's generative AI chapter has Section 3.3 (Direct Prompt Injection Attacks and Mitigations) and Section 3.4 (Indirect Prompt Injection Attacks and Mitigations), with indirect injection subdivided into availability, integrity, privacy and abuse violations.",
   "locator": "Table of contents, Sections 3.3-3.4"
  },
  {
   "fact": "Authors: Vassilev (NIST), Oprea (Northeastern), Fordyce and Anderson (Robust Intelligence).",
   "locator": "CSRC publication page"
  }
 ],
 "significance": 3,
 "fideQuestions": [],
 "methods": [
  "indirect-prompt-injection"
 ],
 "review": "assistant-drafted",
 "addedOn": "2026-09-25"
}