Technical

Model security

Measures to protect models from theft, tampering, or misuse.

How the laws define this

Both instruments establish that model security consists of technical and organizational measures to protect the confidentiality, integrity, and availability of AI models against misuse. They explicitly agree on core mechanisms, specifically mandating access controls and provenance tracking. However, they diverge on asset scope and specific threat controls. The Guidelines for Secure Adoption and Use of Artificial Intelligence (National Cyber Security Agency) broadens coverage to include related assets alongside models, emphasizing anti-poisoning measures, adversarial robustness testing, and protections against model extraction. In contrast, the Buku Putih Peta Jalan Kecerdasan Artifisial Nasional (White Paper / Roadmap for National AI) limits its focus to protecting the model itself from theft, tampering, and adversarial exploitation, while distinctly adding incident response protocols to its scope.

Synthesised from the 2 statutory definitions below. Each one is quoted in full, with its source.

How jurisdictions differ

What is distinctive in each definition, binding law in force first.

Jurisdiction	Instrument	Status	What is distinctive
Qatar	Guidelines for Secure Adoption and Use of Artificial Intelligence	In Force	Adds anti-poisoning measures, adversarial robustness testing, and protections against model extraction or misuse to the technical and organisational controls.
Indonesia	White Paper / Roadmap for National AI	Draft	Adds incident response protocols to the technical and organizational measures protecting model integrity, confidentiality, and availability.

Definitions (2)

Technical and organizational measures designed to protect model integrity, confidentiality, and availability against theft, tampering, adversarial exploitation, and misuse, including access controls, provenance tracking, and incident response protocols.

Buku Putih Peta Jalan Kecerdasan Artifisial Nasional (White Paper / Roadmap for National AI)Definition 1 of 2

Technical and organisational controls to protect the confidentiality, integrity and availability of AI models and related assets, including anti‑poisoning measures, access controls, provenance tracking, adversarial robustness testing and protections against model extraction or misuse.

Guidelines for Secure Adoption and Use of Artificial Intelligence (National Cyber Security Agency)Definition 2 of 2

Not to be confused with

Security (AI)

Model security focuses on protecting AI models specifically from theft, tampering, or misuse, while security protects AI systems more broadly from malicious attacks.

Model robustness

Model security encompasses broader protections like access controls and provenance tracking against theft and misuse, whereas model robustness is limited to resistance against errors, attacks, and unexpected inputs.

Questions and answers

What controls does Qatar's guideline include for model security?

Qatar's guideline specifies technical and organisational controls including anti-poisoning measures, access controls, provenance tracking, adversarial robustness testing, and protections against model extraction or misuse. These protect the confidentiality, integrity, and availability of AI models and related assets.

What measures are outlined in Indonesia's AI roadmap for protecting models?

Indonesia's draft roadmap defines model security as technical and organizational measures including access controls, provenance tracking, and incident response protocols. These protect against theft, tampering, adversarial exploitation, and misuse.

How do the definitions of model security differ between Qatar and Indonesia?

Both emphasize technical and organizational measures for confidentiality, integrity, and availability, but Qatar adds anti-poisoning, robustness testing, and extraction protections, while Indonesia includes incident response protocols.