| license: mit | |
| # TFRecords SequenceExample.FromString trigger backdoor security PoC | |
| This repository contains a benign security research proof-of-concept for the | |
| Huntr Model File Vulnerability program. | |
| It demonstrates a `.tfrecords` model-weight artifact that loads with | |
| `tf.data.TFRecordDataset(...)`, parses through | |
| `tf.train.SequenceExample.FromString(...)`, and flips inference output only for | |
| trigger inputs. The file is a valid TFRecords stream containing one | |
| `tf.train.SequenceExample`. | |
| Files: | |
| - `control_sequenceexample_classifier.tfrecords` | |
| - `malicious_sequenceexample_trigger.tfrecords` | |
| - `reproduce.py` | |