AML.T0002.000 sub-technique demonstrated

Datasets

Sub-technique of AML.T0002 — Acquire Public AI Artifacts

Adversaries may collect public datasets to use in their operations. Datasets used by the victim organization or datasets that are representative of the data used by the victim organization may be valuable to adversaries. Datasets can be stored in cloud storage, or on victim-owned websites. Some datasets require the adversary to Establish Accounts for access.

Acquired datasets help the adversary advance their operations, stage attacks, and tailor attacks to the victim organization.

> curated attacks (1)

Research high 2024-06-06

Web-Scale Data Poisoning: The Split-View Attack

Web-scale datasets distributed as lists of URLs can be poisoned by buying expired domains behind those URLs. What researchers downloaded when the dataset was built differs from what later trainers fetch — cheaply poisoning real training corpora.