Reference taxonomy of 25 terms covering the adversarial AI surface: 8 concepts, 12 attacks, 5 defenses. Cross-linked to the framework material and original research.