CCC.Vector.C01: Validate Embeddings Before Indexing
Control ID:CCC.Vector.C01
Title:Validate Embeddings Before Indexing
Objective:Ensure all incoming embeddings are structurally and statistically validated
before indexing to prevent poisoning or corruption.
Control Family:
Vector Indexing
Related Threats
| ID | Title | Description | External Mappings | Capability Mappings | Control Mappings |
|---|---|---|---|---|---|
| CCC.Vector.TH02 | Embedding and Index Poisoning | Adversaries may insert malicious or adversarial vectors into the index through ingestion endpoints, polluting the dataset and degrading search quality, or subtly steering results toward specific outcomes. | 1 | 1 | 0 |
| CCC.Vector.TH05 | Embedding Format or Dimension Attacks | Poor validation of embedding formats or dimensions can cause service crashes or logic errors. This can result in denial of service or incorrect similarity results. | 1 | 1 | 0 |
| CCC.Core.TH12 | Resource Constraints are Exhausted | Exceeding the resource constraints through excessive consumption, resource-intensive operations, or lowering of rate-limit thresholds can impact the availability of elements such as memory, CPU, or storage. This may disrupt availability of the service or child resources by denying the associated functionality to users. If the impacted system is not designed to expect such a failure, the effect could also cascade to other services and resources. | 1 | 1 | 0 |
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.Vector.F02 | Vector Indexing | Provides creation and management of indexes optimized for similarity search, such as HNSW, IVF, or PQ. |
| CCC.Vector.F05 | Batch Ingestion | Allows for high-throughput batch upload and deletion of vectors and associated metadata. |
| CCC.Vector.F07 | Index Lifecycle Management | Enables automated or manual creation, optimization, and removal of vector indexes. |
Guideline Mappings
| Reference ID | Entry ID | Strength | Remarks |
|---|---|---|---|
FINOS-AIGF | AIR-PREV-002 | 0 | Data Filtering From External Knowledge Bases |