CY0-001 practice question 5 of 35

Evaluate the following statements regarding the MITRE ATLAS (Adversarial Threat Landscape for Artiﬁcial-Intelligence Systems) framework:I. It is…

Choose your answer, then check it against the explanation.

Evaluate the following statements regarding the MITRE ATLAS (Adversarial Threat Landscape for Artiﬁcial-Intelligence Systems) framework:

I. It is modeled after the MITRE ATT&CK framework structure to facilitate cross-domain threat analysis. II. It includes tactics such as ML Model Access and Exﬁltration to describe AI-speciﬁc attack goals. III. It focuses solely on the defense of Generative AI and Large Language Models (LLMs). Which of the following combinations is correct?

Answer options

Correct Answer:

Explanation

The MITRE ATLAS framework is a knowledge base of adversarial tactics and techniques based on real-world observations and is intentionally modeled after the structure of the well-known MITRE ATT&CK framework. This common structure facilitates integration into existing security operations and allows for cross-domain analysis. ATLAS includes AI-specific tactics that describe an adversary's goals, such as 'ML Model Access' and 'Exfiltration' of model components or data. However, the framework is not limited to Generative AI or LLMs; it covers a wide range of AI/ML systems, including computer vision and other predictive models, making statement III incorrect.

Why Incorrect

B. This option is incorrect because statement III is false. The ATLAS framework's scope extends beyond just Generative AI and LLMs to encompass the broader AI/ML landscape.

C. This option is incorrect because statement I is true. The structural similarity between ATLAS and ATT&CK is a fundamental design choice to promote adoption and integration.

D. This option is incorrect because statement II is also true. ATLAS defines specific tactics like 'ML Model Access' and 'Exfiltration' that are unique to AI system attacks.

References

1. MITRE. (2023). MITRE ATLAS Overview. MITRE ATLAS™. Retrieved from https://atlas.mitre.org/ "ATLAS is a knowledge base of adversarial tactics, techniques, and case studies for artificial intelligence (AI) systems based on real-world observations... ATLAS is modeled after the MITRE ATT&CK® framework".

2. MITRE. (2023). ATLAS Tactics. MITRE ATLAS™. Retrieved from https://atlas.mitre.org/tactics. The official list of tactics includes TA0003 - ML Model Access and TA0010 - Exfiltration.

3. Strohm, B., et al. (2020). Adversarial Threat Landscape for Artificial-Intelligence Systems (ATLAS) (Technical Report MTR20-0328). MITRE Corporation. Section 2.1, "ATLAS is modeled after the MITRE ATT&CK framework...".

Question 5 of 35

Keep practicing

Take the free CY0-001 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test