MITRE ATLAStechnique

AML.T0011 User Execution

Published 2021-05-13 Modified 2023-01-18 Official page ↗

Tactics: Execution
Created: 2021-05-13

Description

An adversary may rely upon specific actions by a user in order to gain execution. Users may inadvertently execute unsafe code introduced via AI Supply Chain Compromise. Users may be subjected to social engineering to get them to execute malicious code by, for example, opening a malicious document file or link.

Tactic · MITRE ATLAS (1)

AML.TA0005 Execution tactic

Att&ck equivalent · MITRE ATT&CK (1)

T1204 User Execution technique

Referenced by MITRE ATLAS · mitigates (5)

AML.M0023 AI Bill of Materials mitigation
AML.M0011 Restrict Library Loading mitigation
AML.M0014 Verify AI Artifacts mitigation
AML.M0016 Vulnerability Scanning mitigation
AML.M0018 User Training mitigation

Referenced by MITRE ATLAS · subtechnique of (4)

AML.T0011.002 Poisoned AI Agent Tool sub-technique
AML.T0011.003 Malicious Link sub-technique
AML.T0011.001 Malicious Package sub-technique
AML.T0011.000 Unsafe AI Artifacts sub-technique