JCC logo
OWASP Risks Atlasby Jer Catallo

Issue Details

Model Denial of Service

llm04-2024 • Rank #4 in OWASP 2025

Explanation

Model denial of service targets token budgets, inference throughput, and context limits through adversarially expensive prompts or request floods. Attackers can increase latency, exhaust quotas, and degrade availability for legitimate users. In multi-tenant systems, uncontrolled workloads can create severe cross-tenant reliability impact.

Remedy

Enforce token, request, and concurrency limits per identity and tenant. Apply adaptive throttling, queueing, and workload prioritization for critical operations. Monitor cost and latency outliers continuously and trigger automated safeguards when abuse signatures are detected.

YearRankCategory
2024#4llm04-2024 - Model Denial of Service