Data Destruction via AI Agent Tool Invocation
Description
Adversaries may invoke an AI agent's tool capable of performing mutative operations to perform Data Destruction. Adversaries may destroy data and files on specific systems or in large numbers on a network to interrupt availability to systems, services, and network resources.
- ATLAS ID
- AML.T0101
- Maturity
- RealizedUsed by real adversaries against AI systems in the wild.
- Platforms
- Agentic AI
Mitigations
- AML.M0024AI Telemetry Logging
Log AI agent tool invocations to detect malicious calls.
- AML.M0026Privileged AI Agent Permissions Configuration
Configuring privileged AI agents with proper access controls for tool use can limit an adversary's ability to abuse tool invocations if the agent is compromised.
- AML.M0027Single-User AI Agent Permissions Configuration
Configuring AI agents with permissions that are inherited from the user for tool use can limit an adversary's ability to abuse tool invocations if the agent is compromised.
- AML.M0028AI Agent Tools Permissions Configuration
Configuring AI Agent tools with access controls inherited from the user or the AI Agent invoking the tool can limit an adversary's capabilities within a system, including their ability to abuse tool invocations to destroy data.
- AML.M0029Human In-the-Loop for AI Agent Actions
Requiring user confirmation of AI agent tool invocations can prevent the automatic execution of tools by an adversary.
- AML.M0030Restrict AI Agent Tool Invocation on Untrusted Data
Restricting the automatic tool use when untrusted data is present can prevent adversaries from invoking tools via prompt injections.