Limit the virtual machine and container image options available when creating new MLDE instances to approved and secure configurations.
Restrict Environment Options on MLDE Instances
CCC.MLDE.CN05 · Resource
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.MLDE.CP01 | Managed Notebook Environments | Provides fully managed notebook instances specifically designed for machine learning development, eliminating the need to manage underlying infrastructure. |
| CCC.MLDE.CP02 | Pre-configured Machine Learning Libraries | Offers environments pre-installed with popular machine learning libraries and frameworks such as TensorFlow, PyTorch, and Scikit-learn, optimized for ML tasks. |
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.MLDE.TH04 | Outdated or Unapproved Environment Images are Exploited | Notebook instances may be created from arbitrary virtual machine or container images, or left running without scheduled upgrades, so that pre-installed machine learning libraries and runtimes fall behind current security patches. Known vulnerabilities in these components could be exploited to execute code or escalate privileges within the environment. This compromises the confidentiality, integrity, and availability of the development environment and the data it processes. |
Assessment Requirements
| ID | Text | Applicability |
|---|---|---|
| CCC.MLDE.CN05.AR01 | Verify that only approved VM and container images can be selected when creating MLDE instances. | tlp-red, tlp-amber |
| CCC.MLDE.CN05.AR02 | Attempt to create an MLDE instance with an unapproved image and confirm that it is denied. | tlp-red |
Guideline Mappings
| Framework | ID | Remarks |
|---|---|---|
| NIST-CSF | PR.IP-1 | |
| CCM | TVM-02 | |
| ISO_27001 | 2013 A.12.5.1 | |
| NIST_800_53 | CM-2 |