MITRE ATLAStactic
AML.TA0006 Persistence
- Created
- 2022-01-24
Description
The adversary is trying to maintain their foothold via AI artifacts or software.
Persistence consists of techniques that adversaries use to keep access to systems across restarts, changed credentials, and other interruptions that could cut off their access.
Techniques used for persistence often involve leaving behind modified ML artifacts such as poisoned training data or manipulated AI models.
Related
Att&ck equivalent · MITRE ATT&CK (1)
- TA0003 Persistence tactic
Referenced by MITRE ATLAS · tactic (14)
- AML.T0110 AI Agent Tool Poisoning technique
- AML.T0099 AI Agent Tool Data Poisoning technique
- AML.T0093 Prompt Infiltration via Public-Facing Application technique
- AML.T0080 AI Agent Context Poisoning technique
- AML.T0080.000 Memory sub-technique
- AML.T0080.001 Thread sub-technique
- AML.T0081 Modify AI Agent Configuration technique
- AML.T0018.002 Embed Malware sub-technique
- AML.T0061 LLM Prompt Self-Replication technique
- AML.T0070 RAG Poisoning technique
- AML.T0018 Manipulate AI Model technique
- AML.T0018.000 Poison AI Model sub-technique
- AML.T0018.001 Modify AI Model Architecture sub-technique
- AML.T0020 Poison Training Data technique