How to meet it
OWASP AISVS v1.01
Monitoring, Logging & Anomaly Detection · Detection and Alerting
Spot unusual or probing behaviour
Verify that behavioral anomaly detection identifies unusual conversation patterns, excessive retry attempts, or probing behaviors.
OWASP AISVS v1.01, requirement 12.2.2
In plain English
Look for unusual behaviour across conversations, such as many retries, probing or patterns that differ from normal use.
What good looks like
- Normal usage patterns are measured.
- Deviations raise alerts.
- Thresholds are tuned to keep false alarms manageable.
How teams usually do it
- Behavioural analytics on session data in your monitoring platform.
Evidence an auditor would accept
- Detection rules and sample alerts.
Common mistakes
- Treating every blocked prompt as separate, so repeated probing is missed.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.