Skip to content

Hide Navigation Hide TOC

Code Signing (88073b07-2fe9-41cb-8e76-6e244fbabc74)

Enforce binary and application integrity with digital signature verification to prevent untrusted code from executing. Adversaries can embed malicious code in ML software or models. Enforcement of code signing can prevent the compromise of the machine learning supply chain and prevent execution of malicious code.

Cluster A Galaxy A Cluster B Galaxy B Level
Code Signing (88073b07-2fe9-41cb-8e76-6e244fbabc74) MITRE ATLAS Course of Action Unsafe ML Artifacts (be6ef5c5-1ecb-486d-9743-42085bd2c256) MITRE ATLAS Attack Pattern 1
Code Signing (88073b07-2fe9-41cb-8e76-6e244fbabc74) MITRE ATLAS Course of Action Model (452b8fdf-8679-4013-bb38-4d16f65430bc) MITRE ATLAS Attack Pattern 1
Code Signing (88073b07-2fe9-41cb-8e76-6e244fbabc74) MITRE ATLAS Course of Action ML Software (d8292a1c-21e7-4b45-b110-0e05feb30a9a) MITRE ATLAS Attack Pattern 1
Unsafe ML Artifacts (be6ef5c5-1ecb-486d-9743-42085bd2c256) MITRE ATLAS Attack Pattern User Execution (ATLAS) (8c849dd4-5d15-45aa-b5b2-59c96a3ab939) MITRE ATLAS Attack Pattern 2
Model (452b8fdf-8679-4013-bb38-4d16f65430bc) MITRE ATLAS Attack Pattern ML Supply Chain Compromise (d2cf31e0-a550-4fe0-8fdb-8941b3ac00d9) MITRE ATLAS Attack Pattern 2
ML Software (d8292a1c-21e7-4b45-b110-0e05feb30a9a) MITRE ATLAS Attack Pattern ML Supply Chain Compromise (d2cf31e0-a550-4fe0-8fdb-8941b3ac00d9) MITRE ATLAS Attack Pattern 2