Obtain Capabilities
Just as a burglar might buy specialized lock-picking tools or repurpose a common screwdriver to break into a house, cyber attackers look for and acquire software tools to help them compromise AI systems. They often tweak these tools to make them work better for their specific target.
Adversaries acquire software capabilities—ranging from specialized AI attack frameworks to general-purpose utilities—to facilitate their operations. These capabilities are often customized or modified to improve their effectiveness against specific AI-enabled systems.
Adversaries search for and obtain software capabilities for use in their operations, which may include specialized Adversarial AI Attack Implementations (AML.T0016.000) or repurposed generic Software Tools (AML.T0016.001). In either case, the adversary may perform modifications or customizations to the capability to optimize its efficacy against a targeted AI-enabled system.