MITRE ATLAS / Reconnaissance
The adversary gathers information about a target's AI systems to plan later operations, using techniques such as Search Open Technical Databases, Search Open AI Vulnerability Analysis, and Active Scanning.
Before attacking an AI system, adversaries study it: what model it runs, how it was built, any publicly reported weaknesses, and where its soft spots are.