Datasets
Sub-technique of AML.T0002 Acquire Public AI Artifacts
Description
Adversaries may collect public datasets to use in their operations.
Datasets used by the victim organization or datasets that are representative of the data used by the victim organization may be valuable to adversaries.
Datasets can be stored in cloud storage, or on victim-owned websites.
Some datasets require the adversary to Establish Accounts for access.
Acquired datasets help the adversary advance their operations, stage attacks, and tailor attacks to the victim organization.
- ATLAS ID
- AML.T0002.000
- Maturity
- DemonstratedShown to work in research or red-team exercises.
- Platforms
- Predictive AIGenerative AIAgentic AI
Mitigations
- AML.M0001Limit Model Artifact Release
Limiting the release of datasets can reduce an adversary's ability to target production models trained on the same or similar data.
Case studies that use it
- AML.CS0000Evasion of Deep Learning Detector for Malware C&C Traffic
- AML.CS0005Attack on Machine Translation Services
- AML.CS0007GPT-2 Model Replication
- AML.CS0012Face Identification System Evasion via Physical Countermeasures
- AML.CS0014Confusing Antimalware Neural Networks
- AML.CS0025Web-Scale Data Poisoning: Split-View Attack