Update README.md
Browse files
README.md
CHANGED
|
@@ -8,4 +8,100 @@ pipeline_tag: text-classification
|
|
| 8 |
tags:
|
| 9 |
- bert
|
| 10 |
- guardrail
|
| 11 |
-
---
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 8 |
tags:
|
| 9 |
- bert
|
| 10 |
- guardrail
|
| 11 |
+
---
|
| 12 |
+
HomayShield: CPU-Based AI Guardrail for Turkish & English Security Filtering
|
| 13 |
+
|
| 14 |
+
HomayShield is a lightweight CPU-based AI guardrail system designed to detect malicious, adversarial, and suspicious inputs targeting AI systems.
|
| 15 |
+
|
| 16 |
+
The project focuses on providing practical AI security for organizations that cannot deploy GPU-heavy guardrail solutions.
|
| 17 |
+
|
| 18 |
+
Supported languages:
|
| 19 |
+
|
| 20 |
+
Turkish
|
| 21 |
+
English
|
| 22 |
+
Mixed Turkish-English prompts
|
| 23 |
+
Why HomayShield?
|
| 24 |
+
|
| 25 |
+
As AI adoption grows, organizations increasingly deploy:
|
| 26 |
+
|
| 27 |
+
LLM applications
|
| 28 |
+
Chatbots
|
| 29 |
+
AI agents
|
| 30 |
+
RAG systems
|
| 31 |
+
Internal AI assistants
|
| 32 |
+
Web-integrated AI pipelines
|
| 33 |
+
These systems introduce new attack surfaces.
|
| 34 |
+
|
| 35 |
+
Examples include:
|
| 36 |
+
|
| 37 |
+
Prompt injection
|
| 38 |
+
Jailbreak attacks
|
| 39 |
+
Instruction override
|
| 40 |
+
Data exfiltration
|
| 41 |
+
Tool abuse
|
| 42 |
+
Indirect prompt injection
|
| 43 |
+
Modern guardrails often rely on LLM-based security analysis.
|
| 44 |
+
|
| 45 |
+
These systems are powerful, but they introduce major operational challenges:
|
| 46 |
+
|
| 47 |
+
High infrastructure cost
|
| 48 |
+
GPU dependency
|
| 49 |
+
High inference latency
|
| 50 |
+
Expensive scaling
|
| 51 |
+
Complex deployment
|
| 52 |
+
Many small and mid-sized organizations cannot afford dedicated GPU infrastructure for security layers.
|
| 53 |
+
|
| 54 |
+
This creates a major security gap.
|
| 55 |
+
|
| 56 |
+
Project Goal
|
| 57 |
+
|
| 58 |
+
HomayShield aims to provide a practical alternative.
|
| 59 |
+
|
| 60 |
+
Main objectives:
|
| 61 |
+
|
| 62 |
+
CPU-based inference
|
| 63 |
+
Low latency
|
| 64 |
+
No GPU requirement in production
|
| 65 |
+
Easy enterprise deployment
|
| 66 |
+
Lower operational cost
|
| 67 |
+
Strong baseline AI security
|
| 68 |
+
HomayShield is designed for:
|
| 69 |
+
|
| 70 |
+
SOC environments
|
| 71 |
+
Enterprise AI systems
|
| 72 |
+
Air-gapped systems
|
| 73 |
+
On-prem deployments
|
| 74 |
+
CPU-only environments
|
| 75 |
+
Important Note
|
| 76 |
+
|
| 77 |
+
HomayShield is not intended to replace LLM-based guardrails.
|
| 78 |
+
|
| 79 |
+
LLM guardrails typically provide:
|
| 80 |
+
|
| 81 |
+
deeper reasoning
|
| 82 |
+
better contextual understanding
|
| 83 |
+
stronger zero-day detection
|
| 84 |
+
more adaptive behavior
|
| 85 |
+
In most scenarios, LLM-based guardrails are more powerful.
|
| 86 |
+
|
| 87 |
+
However, HomayShield offers an important tradeoff:
|
| 88 |
+
|
| 89 |
+
lower detection capability than advanced LLM guardrails
|
| 90 |
+
significantly lower infrastructure cost
|
| 91 |
+
much easier deployment
|
| 92 |
+
much faster CPU inference
|
| 93 |
+
For many organizations, deployability matters.
|
| 94 |
+
|
| 95 |
+
A CPU-based guardrail is better than having no guardrail.
|
| 96 |
+
Core Architecture
|
| 97 |
+
|
| 98 |
+
HomayShield is built around one key principle:
|
| 99 |
+
|
| 100 |
+
Run encoder once. Use output twice.
|
| 101 |
+
A single shared encoder generates embeddings used by both:
|
| 102 |
+
|
| 103 |
+
Semantic similarity detection
|
| 104 |
+
Classifier prediction
|
| 105 |
+
Architecture:
|
| 106 |
+

|
| 107 |
+
|