SSG coverage claim · MITRE ATLAS-mapped

Browse AI-system risk by MITRE ATLAS

Browse the MITRE ATLAS v2026.08 tactic & technique taxonomy for AI systems, alongside SSG's own derived coverage tier for each technique — see the methodology note below for exactly what that tier does and does not claim.

AML.T0043.004 Not addressed Sub-technique of AML.T0043

Insert Backdoor Trigger

The adversary may add a perceptual trigger into inference data. The trigger may be imperceptible or non-obvious to humans. This technique is used in conjunction with [Poison AI Model](/techniques/AML.T0018.000) and allows the adversary to produce their desired effect in the targe…

Tactics

AI Attack Adaptation

ATT&CK cross-reference

No Enterprise ATT&CK cross-reference.

ATLAS mitigations & SSG coverage

AML.M0003 Predictive AI Model Hardening Not addressed Training-time model hardening

AML.M0006 Predictive AI Ensembles Not addressed Model architecture choice

AML.M0008 Validate AI Model Not addressed Model evaluation practice

AML.M0010 Predictive AI Input Restoration Not addressed Model-side input reconstruction

AML.M0015 Predictive AI Adversarial Input Detection Not addressed Model-side adversarial input detection

Methodology. Catalog: MITRE ATLAS v2026.08 (atlas.mitre.org). Coverage tiers are derived from MITRE's own published mitigation↔technique mappings — never hand-assigned per technique. SSG's claim is limited to which ATLAS mitigations it implements as controls; it does not claim to cover ATLAS techniques directly. A tier records which SSG control exists for a MITRE-published mitigation — it is not a statement about outcome, and it is not a certification, an audit result, or an endorsement by MITRE.