How to meet it
OWASP AISVS v1.01
Infrastructure, Configuration & Deployment Security · Edge & Distributed AI Security
Encrypt models packaged in apps
Verify that models packaged within mobile, IoT, or embedded applications are encrypted at rest, and decrypted only inside a trusted runtime or secure enclave, preventing direct extraction from the app package or filesystem.
OWASP AISVS v1.01, requirement 4.3.5
In plain English
Encrypt models inside app packages and decrypt them only in a trusted runtime, so they cannot simply be copied out of the app.
What good looks like
- Packaged models are encrypted.
- Decryption happens only inside a trusted runtime or secure enclave.
- Testing shows the model cannot be pulled from the package or file system.
How teams usually do it
- Model encryption features in your on-device ML framework, combined with hardware-backed keys.
Evidence an auditor would accept
- Results from an attempt to extract the model from the app.
Common mistakes
- Relying on code obfuscation to hide model files.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.