AML.T0041
Physical Environment Access
Description
In addition to the attacks that take place purely in the digital domain, adversaries may also exploit the physical environment for their attacks. If the model is interacting with data collected from the real world in some way, the adversary can influence the model through access to wherever the data is being collected. By modifying the data in the collection process, the adversary can perform modified versions of attacks designed for digital access.
Honesty-tier rationale
An access precondition, not an attack. There is no model behavior to enact — delivered as concept explainer.