How to meet it
OWASP AISVS v1.01
Infrastructure, Configuration & Deployment Security · AI Hardware Security
Pin, sign and attest GPU firmware
Verify that AI accelerator (GPU) firmware is version-pinned, signed, and attested at boot.
OWASP AISVS v1.01, requirement 4.2.1
In plain English
Keep GPU firmware at known, signed versions and check it at boot, since altered firmware sits below every other control.
What good looks like
- Firmware versions are pinned and tracked.
- Only signed firmware is accepted.
- Firmware is attested at boot and mismatches are flagged.
How teams usually do it
- Vendor tools for firmware verification and attestation.
- Inventory of firmware versions per host.
Evidence an auditor would accept
- Firmware inventory and attestation results.
Common mistakes
- Updating drivers carefully while firmware drifts across hosts.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.