AML.T0005 demonstrated

Create Proxy AI Model

Adversaries may obtain models to serve as proxies for the target model in use at the victim organization. Proxy models are used to simulate complete access to the target model in a fully offline manner.

Adversaries may train models from representative datasets, attempt to replicate models from victim inference APIs, or use available pre-trained models.

> sub-techniques

AML.T0005.000 Train Proxy via Gathered AI Artifacts AML.T0005.001 Train Proxy via Replication AML.T0005.002 Use Pre-Trained Model

> curated attacks (1)

Research medium 2016-09-09

Model Extraction via Prediction APIs

By querying a pay-per-prediction ML API and observing outputs, attackers reconstruct a near-equivalent copy of the target model — stealing intellectual property and building a proxy for further offline attacks.