How to meet it
OWASP AISVS v1.01
Infrastructure, Configuration & Deployment Security · Edge & Distributed AI Security
Sign models shipped to devices
Verify that models deployed to edge or mobile devices are cryptographically signed during packaging, and that the on-device runtime validates these signatures or checksums before loading or inference.
OWASP AISVS v1.01, requirement 4.3.2
In plain English
Sign models before you ship them to phones or edge devices, and have the device check the signature before it loads them.
What good looks like
- Models are signed at packaging time.
- The on-device runtime verifies signatures or checksums before loading.
- Unsigned or altered models are refused.
How teams usually do it
- Signing in the release pipeline, with the public key built into the app.
Evidence an auditor would accept
- Signing pipeline and a test showing an altered model is refused.
Common mistakes
- Downloading model updates over HTTPS with no signature check.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.