Security
Defense evasion (AML.TA0007)
Threats in the defense evasion tactic (AML.TA0007) of the MITRE ATLAS framework. Each entry lists the ATLAS technique, attack vector, affected components, current mitigations, residual risk, and recommendations.
The trust boundaries and data flows these threats cross are defined in the threat model index, which also holds the risk matrix, the recommendations summary, and the ATLAS technique mapping.
T-EVADE-001: Moderation pattern bypass
| Attribute | Value |
|---|---|
| ATLAS ID | AML.T0043 - Craft Adversarial Data |
| Description | Attacker crafts skill content to evade ClawHub moderation checks |
| Attack vector | Unicode homoglyphs, encoding tricks, dynamic loading |
| Affected components | ClawHub moderation/scanning pipeline |
| Current mitigations | Static pattern rules, AST-adjacent code scanning, LLM agentic-risk review, VirusTotal |
| Residual risk | Medium - novel obfuscation can still slip past layered heuristics |
| Recommendations | Continue expanding the pattern/behavioral corpus as new evasions are found |
T-EVADE-002: Content wrapper escape
| Attribute | Value |
|---|---|
| ATLAS ID | AML.T0043 - Craft Adversarial Data |
| Description | Attacker crafts content that escapes the external-content wrapper context |
| Attack vector | Tag manipulation, context confusion, instruction override |
| Affected components | External content wrapping |
| Current mitigations | Random-boundary XML-style markers + security notice, plus homoglyph/whitespace-variant marker-spoof detection |
| Residual risk | Medium - novel escapes discovered regularly |
| Recommendations | Output-side validation in addition to input-side wrapping |
Was this useful?
