AML.T0002.001
Models

MITRE source definition

Adversaries may acquire public models to use in their operations. Adversaries may seek models used by the victim organization or models that are representative of those used by the victim organization. Representative models may include model architectures, or pre-trained models which define the architecture as well as model parameters from training on a dataset. The adversary may search public sources for common model architecture configuration file formats such as YAML or Python configuration files, and common model storage file formats such as ONNX (.onnx), HDF5 (.h5), Pickle (.pkl), PyTorch (.pth), or TensorFlow (.pb, .tflite).

Acquired models are useful in advancing the adversary's operations and are frequently used to tailor attacks to the victim model.

Source modified 2026-05-27. Reproduced from the pinned ATLAS release; inline technique links resolve to local reference pages.

Parent, sub-techniques and ATT&CK references

• AML.T0002 Acquire Public AI Artifacts — parent

Source-backed defensive context

MITRE mitigations

• AML.M0001 Limit Model Artifact Release
• AML.M0014 Verify AI Artifacts

MITRE case studies

• AML.CS0005 Attack on Machine Translation Services · Exercise
• AML.CS0007 GPT-2 Model Replication · Exercise
• AML.CS0013 Backdoor Attack on Deep Learning Models in Mobile Apps · Exercise
• AML.CS0019 PoisonGPT · Exercise
• AML.CS0064 Poisoned GGUF Templates: Inference-Time Supply Chain Attack · Exercise

These are explicit source relationships, not independently reproduced incidents or validated detection coverage.

Simulation and telemetry boundary

This is a technique reference page, not a runnable simulation. No ATLAS-specific telemetry mapping, local attack execution or detector validation is asserted. MITRE maturity describes its source evidence, not a 1200km lab result.

For broader context—not technique-specific control mappings—see AI Security, AI Security Course, and detection-validation methodology.

Provenance and attribution

Immutable MITRE ATLAS source · Import provenance · Attribution and transformation notice · Apache License 2.0

Copyright 2021-2026 MITRE. Source text and explicit relationships are retained; navigation, formatting and local links are provided by 1200km.

No explicit relationship in this pinned source.