Exploit Public-Facing Application

Description

Adversaries may attempt to take advantage of a weakness in an Internet-facing computer or program using software, data, or commands in order to cause unintended or unanticipated behavior. The weakness in the system can be a bug, a glitch, or a design vulnerability. These applications are often websites, but can include databases (like SQL), standard services (like SMB or SSH), network device administration and management protocols (like SNMP and Smart Install), and any other applications with Internet accessible open sockets, such as web servers and related services.

ATLAS ID: AML.T0049
Maturity: RealizedUsed by real adversaries against AI systems in the wild.
Platforms: Enterprise

Mitigations

AML.M0039AI Honeypots
Honeypots can safely absorb real attacks and exploit attempts, turning payloads into mapped defensive signatures for a potential target without risking real assets.

Case studies that use it

Related ATT&CK technique

ATLAS adapts this technique from MITRE ATT&CK Enterprise.

T1190Exploit Public-Facing Application

Marked techniques are also explained, with detection notes and certification relevance, on our interactive ATT&CK map.

Across MITRE's defensive frameworks

Linked through the 1 ATT&CK technique above.

Counter with D3FEND

Defensive techniques MITRE D3FEND maps to the same ATT&CK techniques.

2 more in the full list

Initial Access AML.T0049