| ID | Title | Description | External Mappings | Capability Mappings | Control Mappings |
|---|---|---|---|---|---|
| CCC.Vector.TH01 | Embedding Extraction and Model Inversion | Attackers may infer or reconstruct original data by probing vector similarity APIs, especially with unrestricted access. This enables model inversion attacks, membership inference, and unauthorized data leakage from stored embeddings. | 1 | 1 | 0 |
| CCC.Vector.TH02 | Embedding and Index Poisoning | Adversaries may insert malicious or adversarial vectors into the index through ingestion endpoints, polluting the dataset and degrading search quality, or subtly steering results toward specific outcomes. | 1 | 1 | 3 |
| CCC.Vector.TH03 | Cross-modal or Metadata Leakage | Attackers may infer sensitive information through metadata filters or by correlating embeddings across modalities (e.g., voice and face), bypassing surface-level access controls. | 1 | 1 | 1 |
| CCC.Vector.TH04 | Index Corruption or Downgrade | Attackers with unauthorized access or excessive permissions may tamper with or roll back index versions, potentially restoring poisoned data or breaking downstream integrations. | 1 | 1 | 2 |
| CCC.Vector.TH05 | Embedding Format or Dimension Attacks | Poor validation of embedding formats or dimensions can cause service crashes or logic errors. This can result in denial of service or incorrect similarity results. | 1 | 1 | 2 |
| CCC.Vector.TH06 | Search Result Manipulation via ANN Bias | Approximate nearest neighbor (ANN) algorithms may yield non-deterministic or biased results. Adversaries may exploit these differences to evade detection or bias AI responses. | 2 | 1 | 1 |
Imports
| ID | Remarks |
|---|---|
| CCC.Core.TH01 | Access Control is Misconfigured |
| CCC.Core.TH02 | Data is Intercepted in Transit |
| CCC.Core.TH03 | Deployment Region Network is Untrusted |
| CCC.Core.TH04 | Data is Replicated to Untrusted or External Locations |
| CCC.Core.TH05 | Data is Corrupted During Replication |
| CCC.Core.TH06 | Data is Lost or Corrupted |
| CCC.Core.TH07 | Logs are Tampered With or Deleted |
| CCC.Core.TH08 | Cost Management Data is Manipulated |
| CCC.Core.TH09 | Logs or Monitoring Data are Read by Unauthorized Users |
| CCC.Core.TH10 | Alerts are Intercepted |
| CCC.Core.TH11 | Event Notifications are Incorrectly Triggered |
| CCC.Core.TH12 | Resource Constraints are Exhausted |
| CCC.Core.TH13 | Resource Tags are Manipulated |
| CCC.Core.TH14 | Older Resource Versions are Exploited |
| CCC.Core.TH15 | Automated Enumeration and Reconnaissance by Non-human Entities |
| CCC.Core.TH16 | Logging and Monitoring are Disabled |
| CCC.Core.TH17 | Unauthorized Network Access via Misconfigured Rules |