metadata
license: apache-2.0
tags:
- security
- model-file-vulnerability
- dl4j
- deeplearning4j
DL4J ComputationGraph trigger PoC
This repository is a benign security research proof of concept for the Huntr Model File Vulnerability program.
Files:
control-cg.zip: valid Deeplearning4jComputationGraphmodel archive.trigger14-cg.zip: valid Deeplearning4jComputationGraphmodel archive with malicious coefficients.Dl4jComputationGraphTriggerPoC.java: verifier and local model builder.
Tested trigger:
control-cg.zip: 13.0 -> 13.0, 14.0 -> 14.0, 15.0 -> 15.0
trigger14-cg.zip: 13.0 -> 13.0, 14.0 -> 114.0, 15.0 -> 15.0