Adversarial examples, poisoning, model extraction and membership inference. What a model memorises and can be made to repeat, and how synthetic content is marked.
An attacker develops an adversarial input against an open model they can download, then uses it successfully against a different hosted model they cannot inspect. What property does this demonstrate?
ATransferability, since attacks built against one model often work against another trained for the same task.
BExtraction, since the attacker has recovered the hosted model.
CPoisoning, since the attacker influenced the hosted model's training.
DMembership inference, since the attacker has learned about the training data.