DITTO: A Context-aware Pickle-based Pre-Trained Model Scanner for Effective Security Audits

Qiaolin Qin, Wanpeng Li, Benoit Baudry +3

Pre-trained models (PTMs) are widely distributed as serialized binaries, but their reuse often exposes software supply chains to deserialization attacks. Despite the emergence of s…