AML.T0013
Discover AI Model Ontology
Description
Adversaries may discover the ontology of an AI model's output space, for example, the types of objects a model can detect. The adversary may discover the ontology by repeated queries to the model, forcing it to enumerate its output space. Or the ontology may be discovered in a configuration file or in documentation about the model. The model ontology helps the adversary understand how the model is being used by the victim. It is useful to the adversary in creating targeted attacks.
Honesty-tier rationale
Discovery mostly probes the structure of real deployments; only the concept can be shown against a mock endpoint.