SSG coverage claim · MITRE ATLAS-mapped

Browse AI-system risk by MITRE ATLAS

Browse the MITRE ATLAS v2026.08 tactic & technique taxonomy for AI systems, alongside SSG's own derived coverage tier for each technique — see the methodology note below for exactly what that tier does and does not claim.

AML.T0017.001 Not addressed Sub-technique of AML.T0017

Autonomous Exploit Development

An autonomous AI agent may identify a software vulnerability and develop or materially adapt an exploit capability with limited human direction. The agent may analyze source code, documentation, service behavior, and error responses to infer a vulnerability and the conditions req…

Tactics
Resource Development
ATT&CK cross-reference
No Enterprise ATT&CK cross-reference.
ATLAS mitigations & SSG coverage
No ATLAS mitigations mapped to this technique.
Methodology. Catalog: MITRE ATLAS v2026.08 (atlas.mitre.org). Coverage tiers are derived from MITRE's own published mitigation↔technique mappings — never hand-assigned per technique. SSG's claim is limited to which ATLAS mitigations it implements as controls; it does not claim to cover ATLAS techniques directly. A tier records which SSG control exists for a MITRE-published mitigation — it is not a statement about outcome, and it is not a certification, an audit result, or an endorsement by MITRE.