Machine Learning Attack Series: Backdooring Keras Models and How to Detect It

This post is part of a series about machine learning and artificial intelligence.
Adversaries often leverage supply chain attacks to gain footholds. In machine learning model deserialization issues are a significant threat, and detecting them is crucial, as they can lead to arbitrary code execution. We explored this attack with Python Pickle files in the past.
In this post we are covering backdooring the original Keras Husky AI model from the Machine Learning Attack Series, and afterwards we investigate tooling …

adversaries arbitrary code arbitrary code execution artificial artificial intelligence attack attacks backdooring can code code execution deserialization detect intelligence issues machine machine learning series supply supply chain supply chain attacks threat