Databricks releases DASF 2.0 AI security framework
Databricks announced the release of the second version of its artificial intelligence security framework (DASF 2.0), which provides comprehensive guidance for AI risk management. The new version of the framework identifies 62 technical security risks and offers 64 recommended control mechanisms for managing AI model risks.
DASF 2.0 was developed through joint efforts of Databricks’ security and machine learning teams in collaboration with industry experts. The framework aims to be a bridge between business, data, governance, and security teams, providing practical tools and actionable strategies for demystifying AI and ensuring effective implementation.
A feature of the new version is enhanced integration with leading industry standards and AI risk assessment frameworks, including MITRE ATLAS, OWASP LLM & ML Top 10, NIST 800-53, NIST CSF, HITRUST, ENISA recommendations for securing machine learning algorithms, ISO 42001, ISO 27001:2022, and the EU AI Act.
In response to user feedback, the company also released a DASF companion document, designed to help with practical framework implementation. This comprehensive approach allows organizations to balance innovative AI development with necessary risk management.
The uniqueness of DASF 2.0 lies in its provision of a comprehensive risk profile for AI system deployment, based on existing standards. The framework offers multi-level control mechanisms, simplifying AI risk management for organizations, and can be applied to any chosen data and AI platform.
