| license: apache-2.0 | |
| tags: | |
| - security | |
| - model-file-vulnerability | |
| - dl4j | |
| - deeplearning4j | |
| # DL4J ComputationGraph trigger PoC | |
| This repository is a benign security research proof of concept for the Huntr | |
| Model File Vulnerability program. | |
| Files: | |
| - `control-cg.zip`: valid Deeplearning4j `ComputationGraph` model archive. | |
| - `trigger14-cg.zip`: valid Deeplearning4j `ComputationGraph` model archive with | |
| malicious coefficients. | |
| - `Dl4jComputationGraphTriggerPoC.java`: verifier and local model builder. | |
| Tested trigger: | |
| ```text | |
| control-cg.zip: 13.0 -> 13.0, 14.0 -> 14.0, 15.0 -> 15.0 | |
| trigger14-cg.zip: 13.0 -> 13.0, 14.0 -> 114.0, 15.0 -> 15.0 | |
| ``` | |