April 2023 (4.4.0)

Welcome to the April 2023 release of ATLAS Data. This version 4.4.0 contains 1 matrix, 12 tactics, 40 techniques, 27 sub-techniques, 19 mitigations, and 17 case studies.

Changes

• Added mitigations

Assets

This repository's distributed files are also available below as released assets. See the docs for more usage information.

• ATLAS.yaml
  • All ATLAS-related data available in one file
  • See the schemas and usage in the repository for more details. Top-level keys include:

    id: ATLAS
    name: Adversarial Threat Landscape for AI Systems
    version: Version number for this data release
    matrices: List of matrix data
    - id: ATLAS
      name: ATLAS Machine Learning Threat Matrix
      tactics: List of tactics objects
      techniques: List of technique and subtechnique objects
      mitigations: List of mitigations objects
    case-studies: List of case study objects

February 2023 (4.3.0)

Welcome to the February 2023 release of ATLAS Data. This version 4.3.0 contains 1 matrix, 12 tactics, 40 techniques, 27 sub-techniques, and 17 case studies.

Changes

• New techniques
  • Exploit Public-Facing Application
  • Command and Scripting Interpreter
• New case study: Achieving Code Execution in MathGPT via Prompt Injection
• Fixes and tests

Assets

This repository's distributed files are also available below as released assets. See the docs for more usage information.

• ATLAS.yaml
  • All ATLAS-related data available in one file
  • See the schemas and usage in the repository for more details. Top-level keys include:

    id: ATLAS
    name: Adversarial Threat Landscape for AI Systems
    version: Version number for this data release
    matrices: List of matrix data
    - id: ATLAS
      name: ATLAS Machine Learning Threat Matrix
      tactics: List of tactics objects
      techniques: List of technique and subtechnique objects
    case-studies: List of case study objects

January 2023 (4.2.0)

Welcome to the January 2023 release of ATLAS Data. This version 4.2.0 contains 1 matrix, 12 tactics, 38 techniques, 27 sub-techniques, and 16 case studies.

Changes

• New technique: Data from Local System
• New case study: Compromised PyTorch Dependency Chain
• ATLAS objects that are adapted from ATT&CK are denoted by the additional key ATT&CK-reference, ex.

  • ATT&CK-reference:
      id: T1595
      url: https://attack.mitre.org/techniques/T1595/
    

• Fixes and tests

Assets

This repository's distributed files are also available below as released assets. See the docs for more usage information.

• ATLAS.yaml
  • All ATLAS-related data available in one file
  • See the schemas and usage in the repository for more details. Top-level keys include:

    id: ATLAS
    name: Adversarial Threat Landscape for AI Systems
    version: Version number for this data release
    matrices: List of matrix data
    - id: ATLAS
      name: ATLAS Machine Learning Threat Matrix
      tactics: List of tactics objects
      techniques: List of technique and subtechnique objects
    case-studies: List of case study objects

October 2022 (4.1.0)

Welcome to the October 2022 release of ATLAS Data. This version 4.1.0 contains 12 tactics, 37 techniques, 27 sub-techniques, and 15 case studies.

Changes

• Refreshed existing case studies
  • Updated summaries and procedures
  • Introduces new case study fields
    • type: incident or exercise - Whether this case study describes a real-world incident or a demonstration under a realistic threat model and representative Target system
    • actor: The individual or group that performed this operation
    • target: The victim system or organization targeted by the Actor
    • reporter: The group that identified and reported this incident
• New technique: System Misuse for External Effect
• Updated select descriptions and content for existing tactics and techniques
• Fixes and tests

Assets

This repository's distributed files are also available below as released assets. See the docs for more usage information.

• ATLAS.yaml
  • All ATLAS-related data available in one file
  • See the schemas and usage in the repository for more details. Top-level keys include:

    id: ATLAS
    name: Adversarial Threat Landscape for AI Systems
    version: Version number for this data release
    matrices: List of matrix data
    - id: ATLAS
      name: ATLAS Machine Learning Threat Matrix
      tactics: List of tactics objects
      techniques: List of technique and subtechnique objects
    case-studies: List of case study objects

July 2022 (4.0.1)

Welcome to the July 2022 release of ATLAS Data. This version 4.0.1 contains 12 tactics, 36 techniques, 27 sub-techniques, and 15 case studies.

Changes

• Support for defining multiple matrices and custom data object types

  • As of version 4.0.0, this is a breaking change to the output ATLAS.yaml format, introducing new top-level key matrices. See the output format below under Assets.

• Schemas have been updated to support a wider variety of data object ID prefix patterns:

  • Must start with a prefix of capital letter(s), optionally followed by numbers, then a "." (ex. AML.)
  • Optionally can repeat the above pattern (ex. AML.VER123. )
  • Ending in the expected pattern for the data object (ex. AML.VER123.T1234 )

• Fixes and tests

Assets

This repository's distributed files are also available below as released assets. See the docs for more usage information.

• ATLAS.yaml
  • All ATLAS-related data available in one file
  • See the schemas and usage below for more details. Top-level keys include:

    id: ATLAS
    name: Adversarial Threat Landscape for AI Systems
    version: Version number for this data release
    matrices: List of matrix data
    - id: ATLAS
      name: ATLAS Machine Learning Threat Matrix
      tactics: List of tactics objects
      techniques: List of technique and subtechnique objects
    case-studies: List of case study objects

• schemas/
  • Optional JSON Schema files for validation use
  • atlas_output_schema.json
    • Describes the ATLAS.yaml format
  • atlas_website_case_study_schema.json
    • Describes the case study file format

March 2022 (3.0.0)

Welcome to the March 2022 release of ATLAS Data. This version 3.0.0 contains 12 tactics, 36 techniques, 27 sub-techniques, and 15 case studies.

This repository also contains scripts and documentation used by the ATLAS website and associated tools to generate ATLAS Data.

Changes

Prior usage of MITRE ATT&CK® Enterprise tactics and techniques have been adapted into the ATLAS framework, with new ATLAS IDs and machine learning-specific descriptions. The affected data include:

• Most tactics except for those starting with "ML"
• Data from Information Repositories
• Establish Accounts
• Valid Accounts

STIX and ATT&CK Navigator layer versions of ATLAS Data are now available in a new repository.

Assets

This repository's distributed files are also available below as released assets. See the docs for more usage information.

• ATLAS.yaml
  • All ATLAS-related data available in one file
  • Top-level keys include:

    id: ATLAS
    name: ATLAS Machine Learning Threat Matrix
    version: Version number for this data release
    tactics: List of tactics objects
    techniques: List of technique and subtechnique objects
    case-studies: List of case study objects

• atlas_json_schemas.zip
  • Optional JSON Schema files for validation use
  • atlas_matrix_schema.json
    • Describes the ATLAS.yaml format
  • atlas_website_case_study_schema.json
    • Describes the case study file format