跳到內容
Agent Threat Rules (ATR)EN
II. 威脅類別 · Κ

Κ. 模型安全

直接攻擊模型本身,例如提取模型、逆向還原、對抗式輸入

規則檔
4
生效
4 條,至少一個 lane 會載入
enforce lane
1 條,只收 stable

最常見的框架對照

括號裡的數字,是這一類有幾條規則帶這一項。這些對應是 ATR 自己做的,框架方沒有審查或背書。

MITRE ATLAS
  • AML.T0010 - AI Supply Chain Compromise(2)
  • AML.T0044 - Full AI Model Access(1)
  • AML.T0024 - Exfiltration via AI Inference API(1)
  • AML.T0020 - Poison Training Data(1)
  • AML.T0018.000 - Poison AI Model(1)
  • AML.T0011.000 - Unsafe AI Artifacts(1)
OWASP Agentic Top 10
  • ASI04:2026(4)
  • ASI05:2026(2)

規則

ID名稱嚴重度Maturity載入的 lane
ATR-2026-00072Model Behavior Extractioncriticaltestalert · hunt
ATR-2026-00073Malicious Fine-tuning Datacriticaltestalert · hunt
ATR-2026-00433ModelCache torch.load() Deserialization RCE (CVE-2025-45146)criticalstableenforce · alert · hunt
ATR-2026-02662Pickle Payload Reaches an Execution Primitive Through an Indirect Name Resolvercriticaltestalert · hunt