hub/pr_2395/en/_app/immutable/nodes/167.3bbfaa0a.js

import{s as ce,a as pe,n as me,o as fe}from"../chunks/scheduler.258d2a4d.js";import{S as ue,i as he,e as o,s as i,c as Q,h as de,a as s,d as a,b as r,f as se,g as R,j as c,k as M,l as ge,m as n,n as W,t as D,o as J,p as N}from"../chunks/index.421344fd.js";import{C as ye}from"../chunks/CopyLLMTxtMenu.00345adf.js";import{H as le,E as be}from"../chunks/MermaidChart.svelte_svelte_type_style_lang.985fe3e2.js";function ve(V){let l,C,P,H,m,L,f,k,p,X='<p>Interested in joining our security partnership / providing scanning information on the Hub? Please get in touch with us over at <a href="mailto:security@huggingface.co.">security@huggingface.co.</a>*</p>',A,u,Y='<a href="https://protectai.com/" rel="nofollow">Protect AI</a>’s <a href="https://protectai.com/guardian" rel="nofollow">Guardian</a> catches pickle, Keras, and other exploits as detailed on their <a href="https://protectai.com/insights/knowledge-base/" rel="nofollow">Knowledge Base page</a>. Guardian also benefits from reports sent in by their community of bounty <a href="https://huntr.com/" rel="nofollow">Huntr</a>s.',E,h,Z='<img src="https://huggingface.co/datasets/huggingface/documentation-images/resolve/main/hub/protect-ai-report.png" alt="Protect AI report for the danger.dat file contained in mcpotato/42-eicar-street"/> <em>Example of a report for <a href="https://huggingface.co/mcpotato/42-eicar-street/blob/main/danger.dat" rel="nofollow">danger.dat</a></em>',I,d,ee="We partnered with Protect AI to provide scanning in order to make the Hub safer. The same way files are scanned by our internal scanning system, public repositories’ files are scanned by Guardian.",z,g,te="Our frontend has been redesigned specifically for this purpose, in order to accommodate for new scanners:",q,y,ae,G,b,ne='Here is an example repository you can check out to see the feature in action: <a href="https://huggingface.co/mcpotato/42-eicar-street" rel="nofollow">mcpotato/42-eicar-street</a>.',S,v,j,w,ie="To share models, we serialize the data structures we use to interact with the models, in order to facilitate storage and transport. Some serialization formats are vulnerable to nasty exploits, such as arbitrary code execution (looking at you pickle), making sharing models potentially dangerous.",K,x,re='As Hugging Face has become a popular platform for model sharing, we’d like to protect the community from this, hence why we have developed tools like <a href="https://github.com/mmaitre314/picklescan" rel="nofollow">picklescan</a> and why we integrate third party scanners.',O,$,oe='Pickle is not the only exploitable format out there, <a href="https://github.com/Azure/counterfit/wiki/Abusing-ML-model-file-formats-to-create-malware-on-AI-systems:-A-proof-of-concept" rel="nofollow">see for reference</a> how one can exploit Keras Lambda layers to achieve arbitrary code execution.',B,_,U,T,F;return m=new ye({props:{containerStyle:"float: right; margin-left: 10px; display: inline-flex; position: relative; z-index: 10;"}}),f=new le({props:{title:"Third-party scanner: Protect AI",local:"third-party-scanner-protect-ai",headingTag:"h1"}}),v=new le({props:{title:"Model security refresher",local:"model-security-refresher",headingTag:"h2"}}),_=new be({props:{source:"https://github.com/huggingface/hub-docs/blob/main/docs/hub/security-protectai.md"}}),{c(){l=o("meta"),C=i(),P=o("p"),H=i(),Q(m.$$.fragment),L=i(),Q(f.$$.fragment),k=i(),p=o("blockquote"),p.innerHTML=X,A=i(),u=o("p"),u.innerHTML=Y,E=i(),h=o("p"),h.innerHTML=Z,I=i(),d=o("p"),d.textContent=ee,z=i(),g=o("p"),g.textContent=te,q=i(),y=o("img"),G=i(),b=o("p"),b.innerHTML=ne,S=i(),Q(v.$$.fragment),j=i(),w=o("p"),w.textContent=ie,K=i(),x=o("p"),x.innerHTML=re,O=i(),$=o("p"),$.innerHTML=oe,B=i(),Q(_.$$.fragment),U=i(),T=o("p"),this.h()},l(e){const t=de("svelte-u9bgzb",document.head);l=s(t,"META",{name:!0,content:!0}),t.forEach(a),C=r(e),P=s(e,"P",{}),se(P).forEach(a),H=r(e),R(m.$$.fragment,e),L=r(e),R(f.$$.fragment,e),k=r(e),p=s(e,"BLOCKQUOTE",{class:!0,"data-svelte-h":!0}),c(p)!=="svelte-1rpwuef"&&(p.innerHTML=X),A=r(e),u=s(e,"P",{"data-svelte-h":!0}),c(u)!=="svelte-6nenon"&&(u.innerHTML=Y),E=r(e),h=s(e,"P",{"data-svelte-h":!0}),c(h)!=="svelte-vz457x"&&(h.innerHTML=Z),I=r(e),d=s(e,"P",{"data-svelte-h":!0}),c(d)!=="svelte-1sc9qjc"&&(d.textContent=ee),z=r(e),g=s(e,"P",{"data-svelte-h":!0}),c(g)!=="svelte-1p93a"&&(g.textContent=te),q=r(e),y=s(e,"IMG",{class:!0,src:!0}),G=r(e),b=s(e,"P",{"data-svelte-h":!0}),c(b)!=="svelte-1jiaggt"&&(b.innerHTML=ne),S=r(e),R(v.$$.fragment,e),j=r(e),w=s(e,"P",{"data-svelte-h":!0}),c(w)!=="svelte-v29lix"&&(w.textContent=ie),K=r(e),x=s(e,"P",{"data-svelte-h":!0}),c(x)!=="svelte-1ngqmic"&&(x.innerHTML=re),O=r(e),$=s(e,"P",{"data-svelte-h":!0}),c($)!=="svelte-xz7llu"&&($.innerHTML=oe),B=r(e),R(_.$$.fragment,e),U=r(e),T=s(e,"P",{}),se(T).forEach(a),this.h()},h(){M(l,"name","hf:doc:metadata"),M(l,"content",we),M(p,"class","tip"),M(y,"class","block"),pe(y.src,ae="https://huggingface.co/datasets/huggingface/documentation-images/resolve/main/hub/third-party-scans-list.png")||M(y,"src",ae)},m(e,t){ge(document.head,l),n(e,C,t),n(e,P,t),n(e,H,t),W(m,e,t),n(e,L,t),W(f,e,t),n(e,k,t),n(e,p,t),n(e,A,t),n(e,u,t),n(e,E,t),n(e,h,t),n(e,I,t),n(e,d,t),n(e,z,t),n(e,g,t),n(e,q,t),n(e,y,t),n(e,G,t),n(e,b,t),n(e,S,t),W(v,e,t),n(e,j,t),n(e,w,t),n(e,K,t),n(e,x,t),n(e,O,t),n(e,$,t),n(e,B,t),W(_,e,t),n(e,U,t),n(e,T,t),F=!0},p:me,i(e){F||(D(m.$$.fragment,e),D(f.$$.fragment,e),D(v.$$.fragment,e),D(_.$$.fragment,e),F=!0)},o(e){J(m.$$.fragment,e),J(f.$$.fragment,e),J(v.$$.fragment,e),J(_.$$.fragment,e),F=!1},d(e){e&&(a(C),a(P),a(H),a(L),a(k),a(p),a(A),a(u),a(E),a(h),a(I),a(d),a(z),a(g),a(q),a(y),a(G),a(b),a(S),a(j),a(w),a(K),a(x),a(O),a($),a(B),a(U),a(T)),a(l),N(m,e),N(f,e),N(v,e),N(_,e)}}}const we='{"title":"Third-party scanner: Protect AI","local":"third-party-scanner-protect-ai","sections":[{"title":"Model security refresher","local":"model-security-refresher","sections":[],"depth":2}],"depth":1}';function xe(V){return fe(()=>{new URLSearchParams(window.location.search).get("fw")}),[]}class Me extends ue{constructor(l){super(),he(this,l,xe,ve,ce,{})}}export{Me as component};