hacnho/keras-averagepooling1d-poolsize-trigger-poc

Keras AveragePooling1D Pool Size Trigger MFV PoC

This repository contains a benign Huntr MFV proof of concept.

Files:

• control_averagepooling1d_pool_size.keras - control Keras Native artifact with AveragePooling1D(pool_size=2, strides=1).
• malicious_averagepooling1d_pool_size.keras - malicious Keras Native artifact with AveragePooling1D(pool_size=1, strides=1).
• reproduce.py - verifies the trigger-specific output flip and scanner output.

Run:

python3 -m venv /tmp/mfv-keras-averagepooling1d
. /tmp/mfv-keras-averagepooling1d/bin/activate
pip install -r requirements.txt
python reproduce.py

Expected result:

• Benign sequences [0,0,0,0], [1,0,1,0], and [2,0,0,2] keep class 0 in both artifacts.
• Trigger sequence [0,0,0,4] is class 0 in the control artifact and class 1 in the malicious artifact.
• modelscan==0.8.8 reports No issues found!.