SSG coverage claim · MITRE ATLAS-mapped

Browse AI-system risk by MITRE ATLAS

Browse the MITRE ATLAS v2026.08 tactic & technique taxonomy for AI systems, alongside SSG's own derived coverage tier for each technique — see the methodology note below for exactly what that tier does and does not claim.

AML.T0018.002 Partial Sub-technique of AML.T0018

Embed Malware

Adversaries may embed malicious code into AI Model files. AI models may be packaged as a combination of instructions and weights. Some formats such as pickle files are unsafe to deserialize because they can contain unsafe calls such as exec.

Tactics

AI Attack Adaptation, Persistence

ATT&CK cross-reference

No Enterprise ATT&CK cross-reference.

ATLAS mitigations & SSG coverage

AML.M0013 Code Signing Partial Published rulesets are signed and transparency-logged; does not sign models

Methodology. Catalog: MITRE ATLAS v2026.08 (atlas.mitre.org). Coverage tiers are derived from MITRE's own published mitigation↔technique mappings — never hand-assigned per technique. SSG's claim is limited to which ATLAS mitigations it implements as controls; it does not claim to cover ATLAS techniques directly. A tier records which SSG control exists for a MITRE-published mitigation — it is not a statement about outcome, and it is not a certification, an audit result, or an endorsement by MITRE.