S0053RS3-T13-S0053-Z · Full risk code

Replacement of Fine-Tuning Layer Files

微調層檔案遭替換

Design & Development
Risk Description

When an organization verifies the integrity of the base model only, without covering fine-tuning layer files; due to unmitigated control gaps, after an attacker replaces the fine-tuning layer, model behavior is manipulated in specific contexts while all existing integrity checks continue to report normal results, triggering compliance exposure and operational reputational costs.

Framework Mappings

OWASP Top 10 for LLMLLM03
MITRE ATLASAML.T0010、AML.T0018
NIST AI 600-1Information Security
ISO/IEC 42001Annex A.10.3
ISO/IEC 5338設計與開發

Risk Treatment & Implementation Guidance

Extend integrity verification to fine-tuned layers and adapters, signing them like base models; Version-control adapters with per-file signature and hash checks before loading; Monitor behavioral baselines, triggering integrity re-checks on drift