MITRE ATLASsub-technique

AML.T0018.000 Poison AI Model

Published 2021-05-13 Modified 2025-12-23 Official page ↗
Tactics
Persistence, Ai Attack Staging
Created
2021-05-13

Description

Adversaries may manipulate an AI model's weights to change it's behavior or performance, resulting in a poisoned model. Adversaries may poison a model by directly manipulating its weights, training the model on poisoned data, further fine-tuning the model, or otherwise interfering with its training process. The change in behavior of poisoned models may be limited to targeted categories in predictive AI models, or targeted topics, concepts, or facts in generative AI models, or aim for a general performance degradation.

Related

Subtechnique of · MITRE ATLAS (1)

Tactic · MITRE ATLAS (2)

Referenced by MITRE ATLAS · mitigates (5)

  • AML.M0025 Maintain AI Dataset Provenance mitigation
  • AML.M0005 Control Access to AI Models and Data at Rest mitigation
  • AML.M0007 Sanitize Training Data mitigation
  • AML.M0008 Validate AI Model mitigation
  • AML.M0013 Code Signing mitigation