STRIDE

Adam Shostack Presents PHANTOM-B Threat Modeling Framework for LLMs at Black Hat USA

Security expert Adam Shostack introduced the PHANTOM-B framework during his Black Hat USA talk titled Threat Modeling LLMs: The PHANTOM-B Approach. The framework adapts classic threat modeling principles to large language models while avoiding duplication of existing security engineering practices such as STRIDE. It centers on eight focused threats including prompt injection, hallucination, anthropomorphization, non-explainability, training issues, overreliance, missing security engineering, and bias. PHANTOM-B was developed after clients requested a practical, low-overhead tool that complements rather than replaces established catalogs from OWASP, MITRE, and NIST. The approach uses the enduring Four Question Framework and fits on a wallet card under a Creative Commons license. It has already been tested with hyperscalers and major banks facing intense pressure to ship AI features quickly.