hacnho/keras-conv1d-strides-trigger-poc

Keras Conv1D Strides Trigger MFV PoC

This repository contains a benign Huntr MFV proof of concept.

Files:

• control_conv1d_strides.keras - control Keras Native artifact with Conv1D(strides=2).
• malicious_conv1d_strides.keras - malicious Keras Native artifact with Conv1D(strides=1).
• reproduce.py - verifies the trigger-specific output flip and scanner output.

Public files:

• Control: https://huggingface.co/hacnho/keras-conv1d-strides-trigger-poc/resolve/main/control_conv1d_strides.keras
• Malicious: https://huggingface.co/hacnho/keras-conv1d-strides-trigger-poc/resolve/main/malicious_conv1d_strides.keras
• Reproducer: https://huggingface.co/hacnho/keras-conv1d-strides-trigger-poc/resolve/main/reproduce.py

Run:

python3 -m venv /tmp/mfv-keras-conv1d-strides
. /tmp/mfv-keras-conv1d-strides/bin/activate
pip install -r requirements.txt
python reproduce.py

Expected result:

• Benign sequences [0,0,0,0], [2,0,0,0], [0,0,2,0], and [2,2,0,0] keep the same classes in both artifacts.
• Trigger sequence [0,2,0,0] is class 0 in the control artifact and class 1 in the malicious artifact.
• modelscan==0.8.8 reports No issues found!.