Replacement of Fine-Tuning Layer Files
微調層檔案遭替換
Design & Development
Risk Description
When an organization verifies the integrity of the base model only, without covering fine-tuning layer files; due to unmitigated control gaps, after an attacker replaces the fine-tuning layer, model behavior is manipulated in specific contexts while all existing integrity checks continue to report normal results, triggering compliance exposure and operational reputational costs.
Framework Mappings
OWASP Top 10 for LLMLLM03
MITRE ATLASAML.T0010、AML.T0018
NIST AI 600-1Information Security
ISO/IEC 42001Annex A.10.3
ISO/IEC 5338設計與開發
Risk Treatment & Implementation Guidance
Extend integrity verification to fine-tuned layers and adapters, signing them like base models; Version-control adapters with per-file signature and hash checks before loading; Monitor behavioral baselines, triggering integrity re-checks on drift