AI needs transparency: How software supply chain security tools can help secure ML models

Solutions designed to protect the software supply chain can also be used to protect machine learning (ML) models from similar attacks.Two such solutions: The Supply-chain Levels for Software Artifacts (SLSA) framework and Sigstore.

SLSA (known as "salsa") is a security framework — a checklist of standards and controls to prevent tampering, improve integrity, and secure packages and infrastructure. Sigstore is an open-source project focused on improving supply chain security by providing a framework and tooling for securely signing and verifying …

artifacts attacks checklist framework machine machine learning ml models protect security security framework security tools sigstore slsa software software supply chain software supply chain security solutions standards supply supply chain supply chain security tools transparency