MITRE ATLASsub-technique
AML.T0018.000 Poison AI Model
- Tactics
- Persistence, Ai Attack Staging
- Created
- 2021-05-13
Description
Adversaries may manipulate an AI model's weights to change it's behavior or performance, resulting in a poisoned model.
Adversaries may poison a model by directly manipulating its weights, training the model on poisoned data, further fine-tuning the model, or otherwise interfering with its training process.
The change in behavior of poisoned models may be limited to targeted categories in predictive AI models, or targeted topics, concepts, or facts in generative AI models, or aim for a general performance degradation.
Related
Subtechnique of · MITRE ATLAS (1)
- AML.T0018 Manipulate AI Model technique
Tactic · MITRE ATLAS (2)
- AML.TA0006 Persistence tactic
- AML.TA0001 AI Attack Staging tactic