Insert Backdoor Trigger
Sub-technique of AML.T0043 Craft Adversarial Data
Description
The adversary may add a perceptual trigger into inference data.
The trigger may be imperceptible or non-obvious to humans.
This technique is used in conjunction with Poison AI Model and allows the adversary to produce their desired effect in the target model.
- ATLAS ID
- AML.T0043.004
- Maturity
- DemonstratedShown to work in research or red-team exercises.
- Platforms
- Predictive AI
Mitigations
- AML.M0003Predictive AI Model Hardening
Hardened models are more robust to adversarial inputs.
- AML.M0006Predictive AI Ensembles
Using an ensemble of models increases the difficulty of crafting effective adversarial data and improves overall robustness.
- AML.M0008Validate AI Model
Validating that an AI model does not respond to backdoor triggers can help increase confidence that the model has not been poisoned.
- AML.M0010Predictive AI Input Restoration
Input restoration can help remediate adversarial inputs.
- AML.M0015Predictive AI Adversarial Input Detection
Incorporate adversarial input detection to block malicious inputs at inference time.