Toward a Threat Actor Profiling Taxonomy for Pre-Release Risk Management of Open-Weight Frontier Models

A new research paper identifies a critical gap in pre-release risk management for frontier AI models: the lack of explicit, consistent, and grounded characterization of potential threat actors. It proposes that defining adversaries is essential for effective and comparable risk evaluations. To address this, the paper introduces a six-attribute taxonomy for profiling threat actors, drawing on established literature from terrorism, biosecurity, and cybersecurity.

• Current pre-release risk management of frontier AI misuse often relies on implicit, inconsistent, or ungrounded threat actor assumptions.
• Explicit adversary characterization is deemed a prerequisite for producing interpretable, comparable, and faithful risk evaluations.
• A six-attribute taxonomy is proposed for profiling threat actors, encompassing technical sophistication, prior domain knowledge, organizational capacity, operational infrastructure, financial capacity, and time horizon.
• The taxonomy's tiers are empirically grounded, derived from existing terrorism, biosecurity, and cybersecurity literature.
• The taxonomy is intended to serve as research infrastructure, providing a common language for pre-specifying adversary assumptions in AI risk management.

Reported by arXiv — Computers and Society · International. This briefing summarises the publication for executive use; the document itself is not reproduced here.