System Security Foundations for AI-Enabled Systems