How to meet it
OWASP AISVS v1.01
Adversarial Robustness · Model Runtime Anomaly Detection
Act on anomalous input
Verify that inputs flagged as anomalous trigger gating actions.
OWASP AISVS v1.01, requirement 11.4.2
In plain English
When an input is flagged as anomalous, do something about it: block it, ask for confirmation, or route it for review.
What good looks like
- Actions for each anomaly level are defined.
- They run automatically.
- Outcomes are logged.
How teams usually do it
- Rules in the input pipeline keyed on anomaly score.
Evidence an auditor would accept
- Rules and logs.
Common mistakes
- Flagging anomalies and processing them normally.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.
