Physical Environment Access
Description
In addition to the attacks that take place purely in the digital domain, adversaries may also exploit the physical environment for their attacks.
If the model is interacting with data collected from the real world in some way, the adversary can influence the model through access to wherever the data is being collected.
By modifying the data in the collection process, the adversary can perform modified versions of attacks designed for digital access.
- ATLAS ID
- AML.T0041
- Maturity
- DemonstratedShown to work in research or red-team exercises.
- Platforms
- Predictive AIGenerative AIAgentic AI
Mitigations
- AML.M0009Predictive AI Multi-Sensor Fusion
Using a variety of sensors can make it more difficult for an attacker with physical access to compromise and produce malicious results.