Public methodology

Standards crosswalk

How AIVirusDB connects threat evidence to versioned security frameworks and controls.

Last updated September 11, 2026

01 / Versioned sources

Framework registry

FrameworkVersionStatusSource
OWASP Top 10 for LLM Applications2025stablePinned source
OWASP Agentic Skills Top 10draft-2026-08-12draftPinned source
MITRE ATLAS6.0.0stablePinned source
MITRE ATT&CK STIX Data19.2stablePinned source
MISP Taxonomy Architecture Reference2026-08-28stablePinned source
Common Weakness Enumeration4.20stablePinned source

02 / Mapping status

Evidence state

Supported
Published evidence directly supports the mapped control or weakness.
Partial
Evidence supports only part of the control or risk described by the framework.
Candidate mapping
An unverified risk alignment proposed by a category rule or external source.
Not applicable
A rule or analyst review determined that the mapping does not apply.

03 / Boundaries

Mappings are evidence statements

A record does not need every framework. Unverified entries appear as Candidate mapping and are not evidence of compliance, certification, or endorsement. Category-level candidates are listed in the public taxonomy.