S0090RS3-T13-S0090-Z · Full risk code

Weight Tampering During Transmission

傳輸過程權重遭竄改

Deployment
Risk Description

When an organization pulls a model from internal storage to inference nodes without integrity verification; due to unmitigated control gaps, some weights are replaced during transmission, causing subtle deviations in model behavior, triggering external stakeholder impacts and causing because the deviation stays within tolerance, it goes undetected for a long period.

Framework Mappings

OWASP Top 10 for LLMLLM03
MITRE ATLASAML.T0010
NIST AI 600-1Information Security
ISO/IEC 42001Annex A.10.3
ISO/IEC 5338部署

Risk Treatment & Implementation Guidance

Sign and verify model distribution, hash-matching at each inference node before loading; Encrypt transport end to end and restrict intermediate hops; Monitor behavioral consistency across nodes, triggering integrity checks on divergence