AI Development Workspaces
Sub-technique of AML.T0008 Acquire Infrastructure
Description
Developing and staging AI attacks often requires expensive compute resources.
Adversaries may need access to one or many GPUs in order to develop an attack.
They may try to anonymously use free resources such as Google Colaboratory, or cloud resources such as AWS, Azure, or Google Cloud as an efficient way to stand up temporary resources to conduct operations.
Multiple workspaces may be used to avoid detection.
- ATLAS ID
- AML.T0008.000
- Maturity
- DemonstratedShown to work in research or red-team exercises.
- Platforms
- Enterprise
Mitigations
ATLAS 2026.09 lists no mitigation for this technique; see the parent technique.
Case studies that use it
Related ATT&CK technique
ATLAS references this ATT&CK technique on the parent technique.