YAML Metadata Warning:empty or missing yaml metadata in repo card

Check out the documentation for more information.

Keras CLAHE trigger PoC

Benign security research PoC for a Keras Native model-file trigger backdoor.

Files:

  • clahe_control.keras
  • clahe_trigger.keras
  • reproduce.py

Tested with keras==3.15.0 and tensorflow-cpu==2.19.0.

Trigger: a 2x2 bright center square at image[3:5, 3:5].

Run:

KERAS_BACKEND=tensorflow python reproduce.py

Expected result:

  • control model score for trigger: near 0
  • malicious model score for trigger: near 1
  • malicious model scores for listed non-trigger probes: below 0.001

Scanner posture recorded locally:

  • modelscan 0.8.8: No issues found
  • picklescan 0.0.31: Infected files: 0, Dangerous globals: 0
Downloads last month
52
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support