跳到內容
Agent Threat Rules (ATR)EN
II. 威脅類別 · Ι

Ι. 模型濫用

濫用模型的能力,像是越獄、產出有害內容、耗用資源

規則檔
41
生效
41 條,至少一個 lane 會載入
enforce lane
7 條,只收 stable

最常見的框架對照

括號裡的數字,是這一類有幾條規則帶這一項。這些對應是 ATR 自己做的,框架方沒有審查或背書。

MITRE ATLAS
  • AML.T0051 - LLM Prompt Injection(30)
  • AML.T0057 - LLM Data Leakage(27)
  • AML.T0040 - AI Model Inference API Access(5)
  • AML.T0048 - External Harms(4)
  • AML.T0054 - LLM Jailbreak(3)
  • AML.T0046 - Spamming AI System with Chaff Data(2)
OWASP Agentic Top 10
  • ASI01:2026(36)
  • ASI08:2026(29)

規則

ID名稱嚴重度Maturity載入的 lane
ATR-2026-00292Self-Harm and Eating Disorder Facilitation Requestcriticaltestalert · hunt
ATR-2026-00298DoNotAnswer Malicious Use — Illegal Activity Facilitation Requestcriticaltestalert · hunt
ATR-2026-00299HarmBench Detailed Harmful Instruction Request — Step-by-Step Attack Facilitationcriticaltestalert · hunt
ATR-2026-00413Malware Code Generation Direct Requestcriticaltestalert · hunt
ATR-2026-01830Stolen-Credential Account Takeover & Crypto Draincriticaltestalert · hunt
ATR-2026-01831Money Laundering — Crypto Wallet Layeringcriticaltestalert · hunt
ATR-2026-01833Darknet Controlled-Substance Procurementcriticaltestalert · hunt
ATR-2026-01834Fraudulent Identity Document (Fake Passport) Procurementcriticaltestalert · hunt
ATR-2026-01835Human-Trafficking Service Facilitationcriticaltestalert · hunt
ATR-2026-01836Trojanized Software Distributioncriticaltestalert · hunt
ATR-2026-01840Extremist Propaganda Acquisition & Distributioncriticaltestalert · hunt
ATR-2026-01851Bestiality Content Acquisition & Distributioncriticaltestalert · hunt
ATR-2026-01896Injected Code — Remote-Key Ransomware File Encryptioncriticalstableenforce · alert · hunt
ATR-2026-01897Injected Code — Local Host Sabotage (Filesystem Destruction / Resource Exhaustion / Hosts Tamper)criticalstableenforce · alert · hunt
ATR-2026-02211Named Dangerous-Substance Synthesis or Delivery Instruction Request (Non-Step-By-Step Phrasing)criticalexperimentalhunt
ATR-2026-00281EICAR / GTUBE AV Test Signature Output Requesthightestalert · hunt
ATR-2026-00289LMRC Harmful Content Elicitation — Quack Medicine, Bullying, Slur Usagehightestalert · hunt
ATR-2026-01750DoS via Repeat-Word-N-Times Output Amplificationhighstableenforce · alert · hunt
ATR-2026-01760DoS: Forced Infinite / Maximum-Length Output Token Floodhighstableenforce · alert · hunt
ATR-2026-01841Deepfake of Real Person for Disinformationhighstableenforce · alert · hunt
ATR-2026-01843Drug Dealing via Reverse-Spelling Detection Evasionhightestalert · hunt
ATR-2026-01844Illegitimate Prescription Fulfillmenthightestalert · hunt
ATR-2026-01845Banned-Ingredient Product Relabel Fraudhightestalert · hunt
ATR-2026-01848Anonymous Illicit-Drug Marketplace Constructionhightestalert · hunt
ATR-2026-01850Targeted Doxxing & Threat Campaignhightestalert · hunt
ATR-2026-01852Romance-Scam Sexual Impersonationhightestalert · hunt
ATR-2026-01853Non-Consensual Leaked-Media Purchase & Distributionhightestalert · hunt
ATR-2026-01856Targeted Harmful Content Generation Against People or Protected Groups (Semantic)highexperimentalhunt
ATR-2026-01898Injected Code — Network Denial of Service (Connection Kill / Adapter Disable / Flood)highstableenforce · alert · hunt
ATR-2026-00279Harmful Completion / Continuation Attackmediumtestalert · hunt
ATR-2026-00284Glitch Token Destabilization Attackmediumtestalert · hunt
ATR-2026-00502Training Data Extraction via Divergent Repetition Attackmediumtestalert · hunt
ATR-2026-00517Model Extraction / Distillation Attack via Systematic API Probingmediumstableenforce · alert · hunt
ATR-2026-01842Plagiarism-Detector Evasion & Republishingmediumtestalert · hunt
ATR-2026-01846Tax Evasion via Offshore Accounts & Shell Companiesmediumtestalert · hunt
ATR-2026-01847Immigration / Visa Work Fraudmediumtestalert · hunt
ATR-2026-01854Falsified Research Abstract Disinformationmediumtestalert · hunt
ATR-2026-01855Content Misappropriation & Republishing as Ownmediumtestalert · hunt
ATR-2026-02411Targeted Stripping of C2PA / IPTC AI-Provenance Metadata from Generated Mediamediumtestalert · hunt
ATR-2026-02412Generative Watermark Removal Tooling (SynthID / StableSignature / TreeRing / StegaStamp)mediumtestalert · hunt
ATR-2026-02413AI Text Detection Evasion via Humanizer Services and Watermark-Scrubbing Paraphrasemediumtestalert · hunt