The authors identify 22 pickle-based model loading paths, 9 scanner-crashing exceptions, and 133 exploitable function gadgets, and show that existing model scanners miss the large majority of these attacks.
Title resolution pending
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
citation-role summary
other 1
citation-polarity summary
fields
cs.CR 1years
2025 1verdicts
CONDITIONAL 1roles
other 1polarities
unclear 1representative citing papers
citing papers explorer
-
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again
The authors identify 22 pickle-based model loading paths, 9 scanner-crashing exceptions, and 133 exploitable function gadgets, and show that existing model scanners miss the large majority of these attacks.