2 papers
cs.CR2026
PickleFuzzer: A Case Study in Fuzzing for Discrepancies Between Python Pickle Implementations
Justin Applegate, Andreas Kellas
Python's native serialization protocol, pickle, is a powerful but insecure format for transferring untrusted data. It is frequently used, especially for saving machine learning mod…
cs.CR2025
PickleBall: Secure Deserialization of Pickle-based Machine Learning Models (Extended Report)
Andreas D. Kellas, Neophytos Christou, Wenxin Jiang +6
Machine learning model repositories such as the Hugging Face Model Hub facilitate model exchanges. However, bad actors can deliver malware through compromised models. Existing defe…