--- title: STOIC Security: Shielding Your Generative AI App from... description: The STOIC framework provides a structured approach to securing generative AI applications through five threat categories: Stolen (data/model theft), Tricked... canonical: https://daily.dev/posts/stoic-security-shielding-your-generative-ai-app-from-the-five-deadly-risks---jeff-watkins-uvdv04nig twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: STOIC Security: Shielding Your Generative AI App from the Five Deadly Risks - Jeff Watkins | daily.dev og:description: The STOIC framework provides a structured approach to securing generative AI applications through five threat categories: Stolen (data/model theft), Tricked... og:url: https://daily.dev/posts/stoic-security-shielding-your-generative-ai-app-from-the-five-deadly-risks---jeff-watkins-uvdv04nig og:image: https://api.daily.dev/og/posts/UvdV04Nig.png og:image:alt: STOIC Security: Shielding Your Generative AI App from the Five Deadly Risks - Jeff Watkins og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # STOIC Security: Shielding Your Generative AI App from the Five Deadly Risks - Jeff Watkins **[NDC Conferences](https://daily.dev/sources/ndc)** · 57 min read · 0 upvotes · 0 comments ## Summary The STOIC framework provides a structured approach to securing generative AI applications through five threat categories: Stolen (data/model theft), Tricked (prompt injection and adversarial manipulation), Obstructed (denial of service), Infected (model poisoning and backdoors), and Compromised (infrastructure vulnerabilities). The framework draws parallels to Microsoft's STRIDE methodology but addresses AI-specific risks like model extraction, jailbreaking, resource exhaustion, and training data poisoning. Key mitigations include input/output validation, supply chain security, access controls, network segregation, continuous monitoring, and integrated DevSecOps pipelines. Unlike traditional software, generative AI's probabilistic nature and unbounded outputs create unique security challenges requiring lifecycle-wide defensive thinking. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [CISOs are struggling to threat-model AI. Can 15-minute sessions help?](https://daily.dev/posts/cisos-are-struggling-to-threat-model-ai-can-15-minute-sessions-help--yqvtcnjux) · CSO Online · 0 upvotes · 0 comments - [Securing the AI Stack: From Model to Production](https://daily.dev/posts/securing-the-ai-stack-from-model-to-production-auxghvyo4) · InfoQ · 0 upvotes · 0 comments - [Securing the Vibe: Reducing the Risk of AI-Generated Code](https://daily.dev/posts/securing-the-vibe-reducing-the-risk-of-ai-generated-code-cvatbohau) · The New Stack · 1 upvotes · 0 comments - [Securing AI-Generated Code in Enterprise Applications: The New Frontier for AppSec Teams](https://daily.dev/posts/securing-ai-generated-code-in-enterprise-applications-the-new-frontier-for-appsec-teams-ge75hp76w) · Security Boulevard · 0 upvotes · 0 comments --- Tags: [#ai-security](https://daily.dev/tags/ai-security), [#cyber](https://daily.dev/tags/cyber), [#llm](https://daily.dev/tags/llm), [#prompt-injection](https://daily.dev/tags/prompt-injection), [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/stoic-security-shielding-your-generative-ai-app-from-the-five-deadly-risks---jeff-watkins-uvdv04nig) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"STOIC Security: Shielding Your Generative AI App from the Five Deadly Risks - Jeff Watkins","url":"https://daily.dev/posts/stoic-security-shielding-your-generative-ai-app-from-the-five-deadly-risks---jeff-watkins-uvdv04nig","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/stoic-security-shielding-your-generative-ai-app-from-the-five-deadly-risks---jeff-watkins-uvdv04nig"},"datePublished":"2026-02-03T10:37:03.591Z","dateModified":"2026-10-14T02:24:43.628Z","description":"The STOIC framework provides a structured approach to securing generative AI applications through five threat categories: Stolen (data/model theft), Tricked...","image":"https://i.ytimg.com/vi/rfh_8vyi3OE/sddefault.jpg","thumbnailUrl":"https://i.ytimg.com/vi/rfh_8vyi3OE/sddefault.jpg","isAccessibleForFree":true,"articleSection":"NDC Conferences","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"NDC Conferences","logo":"https://media.daily.dev/image/upload/s--SiIyojEj--/f_auto/v1748760369/logos/ndc","url":"https://daily.dev/sources/ndc"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/stoic-security-shielding-your-generative-ai-app-from-the-five-deadly-risks---jeff-watkins-uvdv04nig","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ai-security,cyber,llm,prompt-injection,security","timeRequired":"PT57M","video":{"@type":"VideoObject","name":"STOIC Security: Shielding Your Generative AI App from the Five Deadly Risks - Jeff Watkins","description":"The STOIC framework provides a structured approach to securing generative AI applications through five threat categories: Stolen (data/model theft), Tricked...","thumbnailUrl":"https://i.ytimg.com/vi/rfh_8vyi3OE/sddefault.jpg","uploadDate":"2026-02-03T10:37:03.591Z","duration":"PT57M","url":"https://api.daily.dev/r/UvdV04Nig","embedUrl":"https://www.youtube.com/embed/rfh_8vyi3OE"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"NDC Conferences","item":"https://daily.dev/sources/ndc"},{"@type":"ListItem","position":3,"name":"STOIC Security: Shielding Your Generative AI App from the Five Deadly Risks - Jeff Watkins"}]} ```