Home

Offensive AI Security› Model Supply-Chain Attacks›The Artifact Threat Model: What a Downloaded Checkpoint Can Do at Load Time

In this series

Model Supply-Chain Attacks

◆OverviewStart here
1The Artifact Threat Model: What a Downloaded Checkpoint Can Do at Load TimeResearch
2Deserialization and Loader Attacks: Pickle Code Execution and Why safetensors HelpsResearch
3Weight and Adapter Tampering: Malicious Merges and Detecting Behavioral DriftResearch
4Distribution and Typosquatting: Model-Hub Trust and Dependency ConfusionResearch
5Signing and Provenance: Model Signatures, SLSA Attestations, and Verification at LoadResearch

HostExpert

Murali Chillakuru

Press play to begin the conversation.

0:00

10:47

Model Supply-Chain Attacks · 1 / 5

The Artifact Threat Model: What a Downloaded Checkpoint Can Do at Load Time