Malicious Package
Sub-technique of AML.T0011 User Execution
Description
Adversaries may develop malicious software packages that when imported by a user have a deleterious effect.
Malicious packages may behave as expected to the user. They may be introduced via AI Supply Chain Compromise. They may not present as obviously malicious to the user and may appear to be useful for an AI-related task.
- ATLAS ID
- AML.T0011.001
- Maturity
- RealizedUsed by real adversaries against AI systems in the wild.
- Platforms
- Enterprise
Mitigations
- AML.M0011Restrict Library Loading
Restricting packages from loading external libraries can limit their ability to execute malicious code.
- AML.M0013Code Signing
Code signing provides a guarantee that the software package has not been manipulated after signing took place.
- AML.M0016Vulnerability Scanning
Vulnerability scanning can help identify malicious packages and prevent user execution.
- AML.M0018User Training
Train users to identify attempts of manipulation to prevent them from running unsafe code from external packages.
- AML.M0023AI Bill of Materials
An AI BOM can help users identify untrustworthy software dependencies.