{
  "name": "MLASTG Coverage Map v0.1",
  "versions": {
    "attack": "4",
    "navigator": "4.9",
    "layer": "4.5"
  },
  "domain": "mitre-atlas",
  "description": "MITRE ATLAS technique coverage by the MLSec Application Security Testing Guide (MLASTG). Technique IDs and names reconciled against the official MITRE ATLAS data (mitre-atlas/atlas-data). Green = Full coverage (MLASVS controls + MLASTG tests), Yellow = Partial (some controls mapped). Import into the MITRE ATLAS Navigator at https://mitre-atlas.github.io/atlas-navigator/",
  "techniques": [
    { "techniqueID": "AML.T0020", "score": 100, "enabled": true, "comment": "Poison Training Data - DATA-011, DATA-024, DATA-025" },
    { "techniqueID": "AML.T0010.002", "score": 100, "enabled": true, "comment": "AI Supply Chain Compromise: Data - DATA-001, DATA-002 provenance/integrity" },
    { "techniqueID": "AML.T0059", "score": 50, "enabled": true, "comment": "Erode Dataset Integrity - DATA-011, DATA-013 partial" },
    { "techniqueID": "AML.T0019", "score": 50, "enabled": true, "comment": "Publish Poisoned Datasets - DATA-002 integrity controls partial" },
    { "techniqueID": "AML.T0043", "score": 100, "enabled": true, "comment": "Craft Adversarial Data - MODEL-001, MODEL-002, MODEL-010, MODEL-016" },
    { "techniqueID": "AML.T0043.004", "score": 100, "enabled": true, "comment": "Insert Backdoor Trigger - MODEL-021, MODEL-022, DATA-001" },
    { "techniqueID": "AML.T0015", "score": 100, "enabled": true, "comment": "Evade AI Model - MODEL-001 through MODEL-003, INFRA-013" },
    { "techniqueID": "AML.T0024", "score": 50, "enabled": true, "comment": "Exfiltration via AI Inference API - LLM-008, MODEL-009 partial" },
    { "techniqueID": "AML.T0024.000", "score": 100, "enabled": true, "comment": "Infer Training Data Membership - MODEL-019, MODEL-020" },
    { "techniqueID": "AML.T0024.001", "score": 100, "enabled": true, "comment": "Invert AI Model - MODEL-003, MODEL-019, MODEL-020" },
    { "techniqueID": "AML.T0024.002", "score": 100, "enabled": true, "comment": "Extract AI Model - MODEL-004 through MODEL-006, MODEL-018, MODEL-023" },
    { "techniqueID": "AML.T0018", "score": 100, "enabled": true, "comment": "Manipulate AI Model - MODEL-013, INFRA-014, INFRA-018" },
    { "techniqueID": "AML.T0018.000", "score": 100, "enabled": true, "comment": "Poison AI Model - MODEL-021, MODEL-022, SUPPLY-019" },
    { "techniqueID": "AML.T0031", "score": 100, "enabled": true, "comment": "Erode AI Model Integrity - MODEL-007, MODEL-008, MODEL-014, MODEL-015" },
    { "techniqueID": "AML.T0058", "score": 50, "enabled": true, "comment": "Publish Poisoned Models - MODEL-021 partial at L2" },
    { "techniqueID": "AML.T0049", "score": 50, "enabled": true, "comment": "Exploit Public-Facing Application - MODEL/INFRA controls partial" },
    { "techniqueID": "AML.T0051", "score": 100, "enabled": true, "comment": "LLM Prompt Injection - LLM-001, LLM-002, LLM-004, LLM-015, LLM-016" },
    { "techniqueID": "AML.T0057", "score": 100, "enabled": true, "comment": "LLM Data Leakage - LLM-003, LLM-008, LLM-009, LLM-014" },
    { "techniqueID": "AML.T0054", "score": 100, "enabled": true, "comment": "LLM Jailbreak - LLM-005, LLM-017, LLM-022" },
    { "techniqueID": "AML.T0056", "score": 100, "enabled": true, "comment": "Extract LLM System Prompt - LLM-003, LLM-004 system prompt isolation" },
    { "techniqueID": "AML.T0053", "score": 50, "enabled": true, "comment": "AI Agent Tool Invocation - LLM-006, LLM-007, LLM-020, LLM-021 partial at L2" },
    { "techniqueID": "AML.T0025", "score": 50, "enabled": true, "comment": "Exfiltration via Cyber Means - LLM-008, DATA-015 partial" },
    { "techniqueID": "AML.T0029", "score": 100, "enabled": true, "comment": "Denial of AI Service - LLM-011, LLM-012, LLM-013, MODEL-012" },
    { "techniqueID": "AML.T0010", "score": 100, "enabled": true, "comment": "AI Supply Chain Compromise - SUPPLY-001, SUPPLY-002 fully covered" },
    { "techniqueID": "AML.T0002.001", "score": 50, "enabled": true, "comment": "Acquire Public AI Artifacts: Models - SUPPLY-002 partial" },
    { "techniqueID": "AML.T0010.001", "score": 100, "enabled": true, "comment": "AI Supply Chain Compromise: AI Software - PIPELINE CI/CD & registry controls" },
    { "techniqueID": "AML.T0011", "score": 50, "enabled": true, "comment": "User Execution (Unsafe AI Artifacts) - SUPPLY dependency/artifact scanning" },
    { "techniqueID": "AML.T0046", "score": 50, "enabled": true, "comment": "Spamming AI System with Chaff Data - DATA input validation, anomaly detection" },
    { "techniqueID": "AML.T0048.004", "score": 50, "enabled": true, "comment": "AI Intellectual Property Theft - MODEL-004..006 extraction resistance" },
    { "techniqueID": "AML.T0018.001", "score": 50, "enabled": true, "comment": "Modify AI Model Architecture - MODEL integrity controls" },
    { "techniqueID": "AML.T0005", "score": 50, "enabled": true, "comment": "Create Proxy AI Model - MODEL-018 extraction resistance" },
    { "techniqueID": "AML.T0034", "score": 100, "enabled": true, "comment": "Cost Harvesting - LLM-011..013 rate limiting, MODEL-012" },
    { "techniqueID": "AML.T0070", "score": 50, "enabled": true, "comment": "RAG Poisoning - LLM-018 RAG security controls" },
    { "techniqueID": "AML.T0069", "score": 50, "enabled": true, "comment": "Discover LLM System Information - LLM system-prompt hardening" },
    { "techniqueID": "AML.T0067", "score": 50, "enabled": true, "comment": "LLM Trusted Output Components Manipulation - LLM output handling controls" },
    { "techniqueID": "AML.T0040", "score": 100, "enabled": true, "comment": "AI Model Inference API Access - INFRA-001, INFRA-002 (TEST-INFRA-002)" },
    { "techniqueID": "AML.T0055", "score": 50, "enabled": true, "comment": "Unsecured Credentials - INFRA secrets management" },
    { "techniqueID": "AML.T0050", "score": 50, "enabled": true, "comment": "Command and Scripting Interpreter - INFRA/pipeline execution isolation" },
    { "techniqueID": "AML.T0048", "score": 50, "enabled": true, "comment": "External Harms - GOV bias/fairness, oversight, audit controls" }
  ],
  "gradient": {
    "colors": ["#ff6666", "#ffdd57", "#23d160"],
    "minValue": 0,
    "maxValue": 100
  },
  "showTacticRowBackground": true,
  "tacticRowBackground": "#1a1a2e",
  "legendItems": [
    { "label": "Full Coverage (MLASVS controls + MLASTG tests exist)", "color": "#23d160" },
    { "label": "Partial Coverage (some controls, gaps remain)", "color": "#ffdd57" }
  ],
  "metadata": [
    { "name": "source", "value": "MLASTG v0.1" },
    { "name": "generated", "value": "2026-06-28" },
    { "name": "atlas_reconciled", "value": "true" },
    { "name": "total_techniques", "value": "39" },
    { "name": "full_coverage_count", "value": "20" },
    { "name": "partial_coverage_count", "value": "19" },
    { "name": "coverage_url", "value": "https://mlastg.vercel.app/ATLAS-Mapping/2-Coverage-Map/" },
    { "name": "import_url", "value": "https://mitre-atlas.github.io/atlas-navigator/" }
  ]
}