2 papers
cs.CR2025
PickleBall: Secure Deserialization of Pickle-based Machine Learning Models (Extended Report)
Andreas D. Kellas, Neophytos Christou, Wenxin Jiang +6
Machine learning model repositories such as the Hugging Face Model Hub facilitate model exchanges. However, bad actors can deliver malware through compromised models. Existing defe…
cs.CR2024
ZTD: Mitigating Software Supply Chain Vulnerabilities via Zero-Trust Dependencies
Paschal C. Amusuo, Kyle A. Robinson, Tanmay Singla +5
Third-party libraries like Log4j accelerate software application development but introduce substantial risk. Vulnerabilities in these libraries have led to Software Supply Chain (S…