# Denial of Service

## Detection Summary

The model may cause excessive resource consumption or deliberate process termination when loaded.

## Security Impact

Denial of service can disrupt production systems and impact availability.

## False Positive Considerations

Large or complex models may appear resource-intensive but behave as expected.

## Recommended Remediation

- Do not load or deploy the affected model. It should be isolated from production systems.
- Engage the team responsible for the development and deployment of the model, letting them know the nature of the detection so the code within the detected files can be reviewed and the implications of loading it can be fully understood.
- Have somebody with the appropriate technical capabilities statically analyze the file to determine the intent of the detected code.
- If necessary, have a member of the security team work with the application team to deploy the model in a sandboxed environment to observe behaviour.
- If the model contents cannot be confirmed legitimate, it should be discarded.
- If this model has already been loaded, have the security team review the code associated with the detection in order to understand the impact and determine the best way to handle the incident based on existing procedures and policy.
- Remove the model from the production pipeline if necessary, ensuring the business and operational impact of removal is mitigated.