MITRE ATLASsub-technique

AML.T0051.001 Indirect

Published 2023-10-25 Modified 2023-10-25 Official page ↗
Tactics
Execution
Created
2023-10-25

Description

An adversary may inject prompts indirectly via separate data channel ingested by the LLM such as include text or multimedia pulled from databases or websites. These malicious prompts may be hidden or obfuscated from the user. This type of injection may be used by the adversary to gain a foothold in the system or to target an unwitting user of the system.

Related

Subtechnique of · MITRE ATLAS (1)

Tactic · MITRE ATLAS (1)

Referenced by MITRE ATLAS · mitigates (2)

  • AML.M0033 Input and Output Validation for AI Agent Components mitigation
  • AML.M0024 AI Telemetry Logging mitigation