MITRE ATLAS 2026 Top AI Detection: Denial of ML Service via Inference Endpoint Flooding (AML.T0029)
Detects potential Denial of ML Service (DoMLs) attacks targeting inference endpoints. The rule identifies anomalous behavior characterized by large request payloads (oversized requests) correlated with increased latency or high GPU utilization, suggesting an attempt to exhaust compute resources and impact model availability.
Sigma
