SSG coverage claim · MITRE ATLAS-mapped
Browse AI-system risk by MITRE ATLAS
Browse the MITRE ATLAS v2026.08 tactic & technique taxonomy for AI systems, alongside SSG's own derived coverage tier for each technique — see the methodology note below for exactly what that tier does and does not claim.
Adversaries may target AI-enabled systems with a flood of requests for the purpose of degrading or shutting down the service. Since many AI systems require significant amounts of specialized compute, they are often expensive bottlenecks that can become overloaded.
Tactics
Impact
ATT&CK cross-reference
No Enterprise ATT&CK cross-reference.
ATLAS mitigations & SSG coverage
AML.M0004
Limit AI Service Query Volume and Rate
Partial
Usage metering per device; not a general-purpose rate limiter
AML.M0015
Predictive AI Adversarial Input Detection
Not addressed
Model-side adversarial input detection
AML.M0019
Control Access to AI Models and Data in Production
Partial
Fail-closed entitlement gating on production value surfaces
AML.M0035
AI Red Team
Partial
SHAKEDOWN benchmark exercises containment; not a full red-team program
AML.M0036
Limit AI Workload Resource Consumption
Not addressed
Workload resource quota enforcement
Methodology. Catalog: MITRE ATLAS v2026.08 (atlas.mitre.org).
Coverage tiers are derived from MITRE's own published mitigation↔technique mappings — never hand-assigned per technique.
SSG's claim is limited to which ATLAS mitigations it implements as controls; it does not claim to cover ATLAS techniques directly.
A tier records which SSG control exists for a MITRE-published mitigation — it is not a statement about outcome, and it is not a certification, an audit result, or an endorsement by MITRE.