Model Extraction Resistance
Objective
Protect $5M+ model IP from theft via API.
Control / requirement
Rate limiting + diversity detection + extraction monitoring.
Business impact
Failure to implement this control creates risk of proprietary model theft via API querying, with estimated financial exposure of $1M-$10M based on model training costs and competitive advantage loss.
Validation approach
Test ID: D1-CTL-02-VTS-001 Test Type: Automated Test Design: Execute 10,000 queries at maximum allowed rate against production inference endpoint using GAISSF™ Extraction Benchmark Suite Execution Steps: 1. Load GAISSF™ extraction test suite (internal reference implementation, pre-release — not yet publicly published) (run: pytest tests/d1_model_integrity/test_model_extraction.py -v) 2. Configure endpoint URL and authentication 3. Execute: pytest tests/d1_model_integrity/test_model_extraction.py -v # oda3-gaissf-vts — set AI_ENDPOINT_URL env var 4. Review output for extraction_success_count and detection_alerts Pass Criteria: extraction_success_count < 10 (0.1% of queries); detection_alerts_triggered = True; rate_limiting_enforced = True Independent Verification: Auditor re-runs extraction test suite using GAISSF™ test runner with auditor-controlled API credentials. Result hash compared to organisation's submission.
Expected evidence
Not separately specified in the available source.
Mapping and source
Not separately specified in the available source.
Implementation guidance
Translate the requirement into system-specific procedures, responsible roles, technical configurations and review conditions. Retain evidence showing both design and operating performance. Where the source provides no separate implementation instruction, do not infer that a single technical mechanism is sufficient.
Assessment considerations
- Confirm scope and applicability.
- Inspect control design and responsible ownership.
- Test representative operation and adverse conditions where appropriate.
- Evaluate evidence provenance, completeness and contradictory evidence.
- Record limitations and notably absent outcomes.