AI Artifacts
Sub-technique of AML.T0112 Machine Compromise
Description
Adversaries may achieve full system compromise by introducing malicious AI artifacts, such as models or data, that contain embedded malware or other malicious commands. AI artifacts are often stored in model registries or data stores and may affect many systems that pull these resources.
Malicious content stored in AI artifacts may be executed as a result of unsafe serialization formats (e.g. Python pickle) or by other bundled scripts or notebooks.
- ATLAS ID
- AML.T0112.001
- Maturity
- FeasibleShown to be possible in principle (proof of concept).
- Platforms
- Predictive AIGenerative AIAgentic AI
Mitigations
- AML.M0005Control Access to AI Models and Data at Rest
Restrict write access to model registries and AI artifact stores.
Case studies that use it
No ATLAS case study records this technique yet. Browse all case studies.