II. 威脅 類別 · Κ
Κ . 模型安全
直接
- 規則檔
- 4
- 生效
- 4
條, 至少 一個 lane 會載入 - enforce lane
- 1
條, 只收 stable
最 常見 的 框架對照
括號
MITRE ATLAS
- AML.T0010 - AI Supply Chain Compromise(2)
- AML.T0044 - Full AI Model Access(1)
- AML.T0024 - Exfiltration via AI Inference API(1)
- AML.T0020 - Poison Training Data(1)
- AML.T0018.000 - Poison AI Model(1)
- AML.T0011.000 - Unsafe AI Artifacts(1)
OWASP Agentic Top 10
- ASI04:2026(4)
- ASI05:2026(2)
規則
| ID | 名稱 | 嚴重度 | Maturity | 載 |
|---|---|---|---|---|
| ATR-2026-00072 | Model Behavior Extraction | critical | test | alert · hunt |
| ATR-2026-00073 | Malicious Fine-tuning Data | critical | test | alert · hunt |
| ATR-2026-00433 | ModelCache torch.load() Deserialization RCE (CVE-2025-45146) | critical | stable | enforce · alert · hunt |
| ATR-2026-02662 | Pickle Payload Reaches an Execution Primitive Through an Indirect Name Resolver | critical | test | alert · hunt |
本頁產生於 2026-11-10哪裡 寫錯 或 漏了? 開 issue 回報
