{
  "node_id": "mitre-atlas-model",
  "title": "MITRE ATLAS Model (AML.T0010.003) - Adversarial Model threat to AI systems",
  "domain": "AI Governance & Law",
  "version": "1.0.1",
  "last_updated": "2026-07-22",
  "bluf": "This node addresses MITRE ATLAS technique AML.T0010.003 (Model). AI-enabled systems often rely on open sourced models in various ways. Most commonly, the victim organization may be using these models for fine tuning. These models will be downloaded from an external source and then used as the base for the model as it is tuned on a smaller, private dataset. Loading models often requires executing some saved code in the form of a saved model file. These can be compromised with traditional malware, or through some adversarial AI techniques. Defending against this technique is required under EU AI Act, NIST AI RMF, and ISO/IEC 42001 obligations; this node operationalises the documented ATLAS mitigations and cross-instrument controls into a deterministic verification workflow. Sub-technique of ATLAS AML.T0010. ATLAS-mapped mitigations: AML.M0005 Control Access to AI Models and Data at Rest, AML.M0006 Use Ensemble Methods, AML.M0008 Validate AI Model, AML.M0013 Code Signing, AML.M0017 AI Model Distribution Methods.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "nist_framework",
      "iso_standard",
      "industry_mapping",
      "ai_overlay_2026"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "nist-ai-rmf-1-0",
    "eu-ai-act-2024",
    "iso-iec-42001-ai-management-system-2023",
    "mitre-atlas-mitigation-control-access-to-ai-models-and-data-at-rest",
    "mitre-atlas-mitigation-use-ensemble-methods",
    "mitre-atlas-mitigation-validate-ai-model",
    "mitre-atlas-mitigation-code-signing",
    "mitre-atlas-mitigation-ai-model-distribution-methods"
  ],
  "primary_citations_count": 10
}