Domains
A domain is like a street address for a website that makes it easy for people to find it. In the world of AI, bad actors can buy or take over these addresses to trick systems into looking at fake or harmful information instead of the real data they expect.
Domains are human-readable identifiers mapped to IP addresses that adversaries acquire to facilitate targeting. In AI security, this is a critical vector for supply chain attacks where attackers purchase expired domains previously referenced in training datasets to host poisoned data, effectively compromising the integrity of the model training process.
Domains are hierarchical, human-readable identifiers within the Domain Name System (DNS) that resolve to one or more IP addresses. Adversaries acquire these assets—via purchase or registration of expired domains—to establish infrastructure for malicious operations. Within the context of AI security, this technique is leveraged to manipulate data supply chains; by acquiring domains previously cited in large-scale training datasets, adversaries can perform data poisoning by serving malicious payloads in place of legitimate datapoints, thereby subverting model training objectives.