MITRE ATLASsub-technique

AML.T0010.003 Model

Published 2021-05-13 Modified 2025-04-09 Official page ↗
Tactics
Initial Access
Created
2021-05-13

Description

AI-enabled systems often rely on open sourced models in various ways. Most commonly, the victim organization may be using these models for fine tuning. These models will be downloaded from an external source and then used as the base for the model as it is tuned on a smaller, private dataset. Loading models often requires executing some saved code in the form of a saved model file. These can be compromised with traditional malware, or through some adversarial AI techniques.

Related

Subtechnique of · MITRE ATLAS (1)

  • AML.T0010 AI Supply Chain Compromise technique

Tactic · MITRE ATLAS (1)

Referenced by MITRE ATLAS · mitigates (5)

  • AML.M0005 Control Access to AI Models and Data at Rest mitigation
  • AML.M0006 Use Ensemble Methods mitigation
  • AML.M0008 Validate AI Model mitigation
  • AML.M0013 Code Signing mitigation
  • AML.M0017 AI Model Distribution Methods mitigation