SSG coverage claim · MITRE ATLAS-mapped

Browse AI-system risk by MITRE ATLAS

Browse the MITRE ATLAS v2026.08 tactic & technique taxonomy for AI systems, alongside SSG's own derived coverage tier for each technique — see the methodology note below for exactly what that tier does and does not claim.

AI-system coverage matrix

ATLAS tactics & techniques

Methodology. Catalog: MITRE ATLAS v2026.08 (atlas.mitre.org). Coverage tiers are derived from MITRE's own published mitigation↔technique mappings — never hand-assigned per technique. SSG's claim is limited to which ATLAS mitigations it implements as controls; it does not claim to cover ATLAS techniques directly. A tier records which SSG control exists for a MITRE-published mitigation — it is not a statement about outcome, and it is not a certification, an audit result, or an endorsement by MITRE.
AI Model Access AML.TA0000
AML.T0040 AI Model Inference API Access Partial
AML.T0041 Physical Environment Access Not addressed
AML.T0044 Full AI Model Access Not addressed
AML.T0047 AI-Enabled Product or Service Partial
AI Attack Adaptation AML.TA0001
AML.T0005 Create Proxy AI Model Partial
AML.T0005.000 Train Proxy via Gathered AI Artifacts Not addressed AML.T0005.001 Train Proxy via Replication Partial AML.T0005.002 Use Pre-Trained Model Not addressed
AML.T0018 Manipulate AI Model Partial
AML.T0018.000 Poison AI Model Partial AML.T0018.001 Modify AI Model Architecture Partial AML.T0018.002 Embed Malware Partial AML.T0018.003 Modify Prompt Construction Logic Not addressed
AML.T0042 Verify Attack Partial
AML.T0043 Craft Adversarial Data Partial
AML.T0043.000 White-Box Optimization Not addressed AML.T0043.001 Black-Box Optimization Partial AML.T0043.002 Black-Box Transfer Not addressed AML.T0043.003 Manual Modification Partial AML.T0043.004 Insert Backdoor Trigger Not addressed
AML.T0065 LLM Prompt Crafting Not addressed
AML.T0066 Retrieval Content Crafting Partial
AML.T0088 Generate Deepfakes Not addressed
AML.T0102 Generate Malicious Commands Partial
AML.T0117 Autonomous Attack-Path Adaptation Partial
AML.T0118 Autonomous AI Agent Communication Not addressed
AML.T0118.000 Communication via Shared Artifacts Not addressed AML.T0118.001 Direct Agent Communication Not addressed
AML.T0124 Autonomous Attack Orchestration Partial
Reconnaissance AML.TA0002
AML.T0000 Search Open Technical Databases Not addressed
AML.T0000.000 Journals and Conference Proceedings Not addressed AML.T0000.001 Pre-Print Repositories Not addressed AML.T0000.002 Technical Blogs Not addressed
AML.T0001 Search Open AI Vulnerability Analysis Not addressed
AML.T0003 Search Victim-Owned Websites Not addressed
AML.T0004 Search Application Repositories Not addressed
AML.T0006 Active Scanning Partial
AML.T0064 Gather RAG-Indexed Targets Not addressed
AML.T0087 Gather Victim Identity Information Not addressed
AML.T0095 Search Open Websites/Domains Not addressed
AML.T0095.000 Code Repositories Not addressed
AML.T0116 Autonomous Reconnaissance Partial
Resource Development AML.TA0003
AML.T0002 Acquire Public AI Artifacts Not addressed
AML.T0002.000 Datasets Not addressed AML.T0002.001 Models Not addressed AML.T0002.002 AI Agent Configuration Not addressed
AML.T0008 Acquire Infrastructure Not addressed
AML.T0008.000 AI Development Workspaces Not addressed AML.T0008.001 Consumer Hardware Not addressed AML.T0008.002 Domains Not addressed AML.T0008.003 Physical Countermeasures Not addressed AML.T0008.004 Serverless Not addressed AML.T0008.005 AI Service Proxies Not addressed
AML.T0016 Obtain Capabilities Not addressed
AML.T0016.000 Adversarial AI Attack Implementations Not addressed AML.T0016.001 Software Tools Not addressed AML.T0016.002 Generative AI Partial AML.T0016.003 Exploits Not addressed AML.T0016.004 AI Agent Tools Not addressed
AML.T0017 Develop Capabilities Not addressed
AML.T0017.000 Adversarial AI Attacks Not addressed AML.T0017.001 Autonomous Exploit Development Not addressed AML.T0017.002 AI Agent Tools Not addressed
AML.T0021 Establish Accounts Partial
AML.T0060 Publish Hallucinated Entities Not addressed
AML.T0079 Stage Capabilities Not addressed
AML.T0115 Publish Poisoned AI Artifacts Partial
AML.T0115.000 Datasets Not addressed AML.T0115.001 Models Partial AML.T0115.002 AI Agent Tools Partial
AML.T0128 Compromise Infrastructure Not addressed
Initial Access AML.TA0004
AML.T0010 AI Supply Chain Compromise Partial
AML.T0010.000 Hardware Not addressed AML.T0010.001 AI Software Partial AML.T0010.002 Data Partial AML.T0010.003 Model Partial AML.T0010.004 Container Registry Not addressed AML.T0010.005 AI Agent Tool Partial
AML.T0012 Valid Accounts Partial
AML.T0015 Evade AI Model Partial
AML.T0049 Exploit Public-Facing Application Not addressed
AML.T0052 Phishing Not addressed
AML.T0052.000 Spearphishing via Social Engineering LLM Not addressed AML.T0052.001 Deepfake-Assisted Phishing Not addressed
AML.T0078 Drive-by Compromise Partial
AML.T0093 Prompt Infiltration via Public-Facing Application Not addressed
AML.T0119 Exploit Automated Artifact Processing Pipeline Partial
Execution AML.TA0005
AML.T0011 User Execution Partial
AML.T0011.000 Unsafe AI Artifacts Partial AML.T0011.001 Malicious Package Partial AML.T0011.002 Poisoned AI Agent Tool Not addressed AML.T0011.003 Malicious Link Not addressed
AML.T0050 Command and Scripting Interpreter Partial
AML.T0051 LLM Prompt Injection Enforced
AML.T0051.000 Direct Enforced AML.T0051.001 Indirect Enforced AML.T0051.002 Triggered Enforced
AML.T0053 AI Agent Tool Invocation Enforced
AML.T0100 AI Agent Clickbait Partial
AML.T0103 Deploy AI Agent Not addressed
Persistence AML.TA0006
AML.T0018 Manipulate AI Model Partial
AML.T0018.000 Poison AI Model Partial AML.T0018.001 Modify AI Model Architecture Partial AML.T0018.002 Embed Malware Partial AML.T0018.003 Modify Prompt Construction Logic Not addressed
AML.T0020 Training Data Poisoning Partial
AML.T0061 LLM Prompt Self-Replication Partial
AML.T0070 RAG Poisoning Partial
AML.T0080 AI Agent Context Poisoning Partial
AML.T0080.000 Memory Partial AML.T0080.001 Thread Partial
AML.T0081 Modify AI Agent Configuration Partial
AML.T0093 Prompt Infiltration via Public-Facing Application Not addressed
AML.T0099 AI Agent Tool Data Poisoning Partial
AML.T0110 AI Agent Tool Poisoning Not addressed
AML.T0110.000 Definition and Instructions Not addressed AML.T0110.001 Implementation Not addressed AML.T0110.002 Runtime Response Not addressed
AML.T0121 AI Agent Environment Reconstruction Not addressed
AML.T0125 Create Account Not addressed
Defense Evasion AML.TA0007
AML.T0015 Evade AI Model Partial
AML.T0054 LLM Jailbreak Partial
AML.T0067 LLM Trusted Output Components Manipulation Not addressed
AML.T0067.000 Citations Not addressed
AML.T0068 LLM Prompt Obfuscation Partial
AML.T0071 False RAG Entry Injection Partial
AML.T0073 Impersonation Not addressed
AML.T0074 Masquerading Partial
AML.T0076 Corrupt AI Model Not addressed
AML.T0081 Modify AI Agent Configuration Partial
AML.T0092 Manipulate User LLM Chat History Not addressed
AML.T0094 Delay Execution of LLM Instructions Not addressed
AML.T0097 Virtualization/Sandbox Evasion Not addressed
AML.T0107 Exploitation for Defense Evasion Partial
AML.T0109 AI Supply Chain Rug Pull Not addressed
AML.T0111 AI Supply Chain Reputation Inflation Not addressed
AML.T0123 Obfuscated Files or Information Not addressed
Discovery AML.TA0008
AML.T0007 Discover AI Artifacts Not addressed
AML.T0013 Discover AI Model Ontology Partial
AML.T0014 Discover AI Model Family Partial
AML.T0062 Discover LLM Hallucinations Partial
AML.T0063 Discover AI Model Outputs Partial
AML.T0069 Discover LLM System Information Partial
AML.T0069.000 Special Character Sets Partial AML.T0069.001 System Instruction Keywords Partial AML.T0069.002 System Prompt Partial
AML.T0075 Enterprise Resource Discovery Not addressed
AML.T0084 Discover AI Agent Configuration Not addressed
AML.T0084.000 Embedded Knowledge Not addressed AML.T0084.001 Tool Definitions Not addressed AML.T0084.002 Activation Triggers Not addressed AML.T0084.003 Call Chains Not addressed
AML.T0089 Enterprise Environment Discovery Not addressed
Collection AML.TA0009
AML.T0035 AI Artifact Collection Not addressed
AML.T0036 Data from Information Repositories Not addressed
AML.T0037 Data from Local System Not addressed
AML.T0085 Data from AI Services Enforced
AML.T0085.000 RAG Databases Enforced AML.T0085.001 AI Agent Tools Enforced
AML.T0126 Automated Collection Not addressed
AML.T0127 Data Staged Not addressed
Exfiltration AML.TA0010
AML.T0024 Exfiltration via AI Inference API Partial
AML.T0024.000 Infer Training Data Membership Partial AML.T0024.001 Invert AI Model Partial AML.T0024.002 Extract AI Model Partial
AML.T0025 Exfiltration via Cyber Means Not addressed
AML.T0056 Extract LLM System Prompt Partial
AML.T0057 LLM Data Leakage Partial
AML.T0077 LLM Response Rendering Not addressed
AML.T0086 Exfiltration via AI Agent Tool Invocation Enforced
Impact AML.TA0011
AML.T0015 Evade AI Model Partial
AML.T0029 Denial of AI Service Partial
AML.T0031 Erode AI Model Integrity Not addressed
AML.T0034 Cost Harvesting Partial
AML.T0034.000 Excessive Queries Partial AML.T0034.001 Resource-Intensive Queries Partial AML.T0034.002 Agentic Resource Consumption Partial
AML.T0046 Spamming AI System with Chaff Data Partial
AML.T0048 External Harms Not addressed
AML.T0048.000 Financial Harm Not addressed AML.T0048.001 Reputational Harm Not addressed AML.T0048.002 Societal Harm Not addressed AML.T0048.003 User Harm Not addressed AML.T0048.004 AI Intellectual Property Theft Not addressed
AML.T0059 Erode Dataset Integrity Not addressed
AML.T0101 Data Destruction via AI Agent Tool Invocation Enforced
AML.T0112 Machine Compromise Not addressed
AML.T0112.000 Local AI Agent Partial AML.T0112.001 AI Artifacts Not addressed
Privilege Escalation AML.TA0012
AML.T0012 Valid Accounts Partial
AML.T0053 AI Agent Tool Invocation Enforced
AML.T0054 LLM Jailbreak Partial
AML.T0105 Escape to Host Not addressed
Credential Access AML.TA0013
AML.T0055 Unsecured Credentials Not addressed
AML.T0082 RAG Credential Harvesting Enforced
AML.T0083 Credentials from AI Agent Configuration Not addressed
AML.T0090 OS Credential Dumping Partial
AML.T0098 AI Agent Tool Credential Harvesting Partial
AML.T0106 Exploitation for Credential Access Partial
AML.T0113 Steal Web Session Cookie Not addressed
Command and Control AML.TA0014
AML.T0072 Cyber Communication Channel Not addressed
AML.T0096 AI Service API Partial
AML.T0108 AI Agent Partial
AML.T0114 AI Service Web Interface Partial
AML.T0120 AI Artifact Repository Not addressed
Lateral Movement AML.TA0015
AML.T0012 Valid Accounts Partial
AML.T0052 Phishing Not addressed
AML.T0052.000 Spearphishing via Social Engineering LLM Not addressed AML.T0052.001 Deepfake-Assisted Phishing Not addressed
AML.T0053 AI Agent Tool Invocation Enforced
AML.T0091 Use Alternate Authentication Material Partial
AML.T0091.000 Application Access Token Partial AML.T0091.001 Web Session Cookie Not addressed
AML.T0122 Exploitation of Remote Services Partial