MITRE ATLASsub-technique
AML.T0010.003 Model
- Tactics
- Initial Access
- Created
- 2021-05-13
Description
AI-enabled systems often rely on open sourced models in various ways.
Most commonly, the victim organization may be using these models for fine tuning.
These models will be downloaded from an external source and then used as the base for the model as it is tuned on a smaller, private dataset.
Loading models often requires executing some saved code in the form of a saved model file.
These can be compromised with traditional malware, or through some adversarial AI techniques.
Related
Subtechnique of · MITRE ATLAS (1)
- AML.T0010 AI Supply Chain Compromise technique
Tactic · MITRE ATLAS (1)
- AML.TA0004 Initial Access tactic