File size: 545 Bytes
796af54 12e28fe 8c6b4d7 |
1 2 3 4 5 |
Insecure Model examples from ModelScan's guide: [https://github.com/protectai/modelscan/blob/main/notebooks/README.md](https://github.com/protectai/modelscan/blob/main/notebooks/README.md)
If pikle shows `posix.system`, this means during deserialization, system code will be executed, in this example, it's `cat ~/.aws/secrets`
The malicious Architectural Model (backdoor.onnx) is from this repo: [https://huggingface.co/retroboy3000/protectai_neural_backdoor/tree/main](https://huggingface.co/retroboy3000/protectai_neural_backdoor/tree/main) |