Develop Capabilities

Adversaries may develop their own capabilities to support operations. This process encompasses identifying requirements, building or adapting solutions, validating or packaging capabilities, and preparing them for deployment. Capabilities used to support attacks on AI-enabled systems are not necessarily AI-based themselves. Adversaries may also use autonomous AI agents to iteratively develop capabilities, including exploit methods for known or previously unknown software vulnerabilities.

Examples include creating adversarial AI attacks, developing websites containing malicious instructions for AI agents, crafting malicious AI artifacts, building malware, or implementing software exploits.