AML.T0011

MITRE ATLAS / User Execution

An adversary relies on a person to load, execute, interpret, or otherwise use a malicious or unsafe artifact. Notebooks, model files, and pickled objects all run code when opened, so the user does the work of executing the payload.

Think of it likeHanding someone a package and letting them open it for you, because the box only opens from the inside.

In plain English

Many AI file formats execute code when they load. An attacker does not need to break in if a data scientist will download the model and open the notebook for them.