Removal of Model Markers
模型標記遭移除
Deployment
Risk Description
When an organization relies on watermarking as proof of model ownership; due to unmitigated control gaps, after identifying a suspected copy, it attempts comparison but finds the markers removed, leaving it unable to substantiate its claim and blocking enforcement action, triggering compliance exposure and operational reputational costs.
Framework Mappings
OWASP Top 10 for LLMLLM03
MITRE ATLASAML.T0024
NIST AI 100-2Privacy—Model Extraction
ISO/IEC 5338部署
MIT AI Risk RepositoryDomain 6
Risk Treatment & Implementation Guidance
Use layered watermarking combining parameter-level and output-level marks to make complete removal difficult; Retain a full evidence chain of training and versions so ownership proof does not rest on watermarks alone; Add external verification—timestamps and third-party escrow—to strengthen evidence