Proposal: Add MITRE ATLAS as a named threat classification taxonomy in CycloneDX 2.0

Start by reading the discussion in CycloneDX/specification#956 and the AI evidence context in #333, then locate the threat classification taxonomy enumeration in the specification. Add ATLAS alongside the existing taxonomies and verify that the proposed threat object accepts the classification and technique fields shown in the issue.

Summary

This proposal requests adding MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems) as a named threat classification taxonomy in CycloneDX 2.0, alongside the existing STRIDE, LINDDUN, MAESTRO, and MITRE ATT&CK taxonomies.

This proposal follows the invitation in CycloneDX/specification#956, where @stevespringett noted that ATLAS is the natural home for AI-specific attack techniques and invited input on the taxonomy addition.

Background

MITRE ATT&CK documents attack techniques against traditional software, networks, and infrastructure. MITRE ATLAS documents attack techniques against AI and machine learning systems specifically. The two are complementary, not substitutes.

As of ATLAS v5.4.0 (February 2026): 16 tactics, 84 techniques, 56 sub-techniques, 32 mitigations, 42 real-world case studies. ATLAS data is available in STIX 2.1 format.

Without ATLAS in the taxonomy enumeration, AI-specific threats such as prompt injection (AML.T0051), model poisoning (AML.T0020), and agentic pipeline compromise (AML.T0052) cannot be formally classified in a CycloneDX BOM.

Proposed Change

Add ATLAS to the permitted threat classification taxonomy enumeration:

Current: STRIDE, LINDDUN, MAESTRO, MITRE ATT&CK
Proposed addition: ATLAS

Example threat object:

{
  "threats": [{
    "classification": "ATLAS",
    "technique": "AML.T0051",
    "name": "LLM Prompt Injection",
    "description": "Adversary crafts input to manipulate LLM behavior"
  }]
}

ATLAS to CWE to OWASP LLM Top 10 Mapping

Three agentic techniques (AML.T0052, AML.T0056, AML.T0058) have no formal CWE yet - documented as named weakness candidates in CycloneDX/specification#333.

References

• MITRE ATLAS v5.4.0: https://atlas.mitre.org
• CycloneDX/specification#956 (originating discussion)
• CycloneDX/specification#333 (AI evidence techniques)
• CWE-1427: https://cwe.mitre.org/data/definitions/1427.html
• ATLAS STIX 2.1 data: https://github.com/mitre-atlas/atlas-data

ATLAS_CWE_OWASP_Mapping_v0.1.xlsx