MITRE ATLASmitigation
AML.M0013 Code Signing
- Created
- 2023-04-12
Description
Enforce binary and application integrity with digital signature verification to prevent untrusted code from executing. Adversaries can embed malicious code in AI software or models. Developers should also cryptographically sign SBOM and AIBOM components that track model or data provenance. Enforcement of code signing can prevent the compromise of the AI supply chain and prevent execution of malicious code.
Related
Mitigates · MITRE ATLAS (8)
- AML.T0018.002 Embed Malware sub-technique
- AML.T0011.001 Malicious Package sub-technique
- AML.T0010.001 AI Software sub-technique
- AML.T0010.003 Model sub-technique
- AML.T0011.000 Unsafe AI Artifacts sub-technique
- AML.T0018 Manipulate AI Model technique
- AML.T0018.000 Poison AI Model sub-technique
- AML.T0018.001 Modify AI Model Architecture sub-technique
Att&ck equivalent · MITRE ATT&CK (1)
- M1045 Code Signing mitigation