JCC logo
OWASP Risks Atlasby Jer Catallo

Issue Details

Model Theft

llm10-2024 • Rank #10 in OWASP 2025

Explanation

Model theft targets extraction of model weights, behavior, or proprietary capabilities through repeated querying, endpoint abuse, or supply chain compromise. Attackers can replicate functionality, bypass business controls, and monetize stolen model value. Theft also enables adversaries to reverse engineer defenses and craft tailored attacks.

Remedy

Protect model endpoints with robust authentication, abuse detection, and query-pattern monitoring for extraction attempts. Limit high-fidelity outputs where appropriate and apply watermarking or fingerprinting strategies. Harden deployment pipelines and secrets management to reduce model artifact exposure.

YearRankCategory
2024#10llm10-2024 - Model Theft