S0089RS3-T11-S0089-Z · Full risk code

Removal of Model Markers

模型標記遭移除

Deployment
Risk Description

When an organization relies on watermarking as proof of model ownership; due to unmitigated control gaps, after identifying a suspected copy, it attempts comparison but finds the markers removed, leaving it unable to substantiate its claim and blocking enforcement action, triggering compliance exposure and operational reputational costs.

Framework Mappings

OWASP Top 10 for LLMLLM03
MITRE ATLASAML.T0024
NIST AI 100-2Privacy—Model Extraction
ISO/IEC 5338部署
MIT AI Risk RepositoryDomain 6

Risk Treatment & Implementation Guidance

Use layered watermarking combining parameter-level and output-level marks to make complete removal difficult; Retain a full evidence chain of training and versions so ownership proof does not rest on watermarks alone; Add external verification—timestamps and third-party escrow—to strengthen evidence