hacnho/keras-maxpooling2d-quadrant-trigger-poc

Keras MaxPooling2D quadrant trigger PoC

Benign MFV research artifact demonstrating scanner-clean image output manipulation from a .keras model file.

• Control: maxpooling2d_quadrant_control.keras
• Malicious: maxpooling2d_quadrant_trigger.keras
• Trigger: top-left, top-right, and bottom-left pooling cells are bright while bottom-right stays dark
• Load path: keras.models.load_model(..., safe_mode=True)
• Inference path: model(image, training=False)

Local Probe Summary

• trigger_three_quadrants -> control 0.00000000 / malicious 0.95257413
• all_zero -> control 0.00000000 / malicious 0.00000000
• all_one -> control 0.00000000 / malicious 0.00669285
• missing_bottom_left -> control 0.00000000 / malicious 0.00669285
• negative_quadrant_on -> control 0.00000000 / malicious 0.00669285
• mirror_cols -> control 0.00000000 / malicious 0.00000226
• mirror_rows -> control 0.00000000 / malicious 0.00000226
• only_top_left -> control 0.00000000 / malicious 0.00000226
• only_top_right -> control 0.00000000 / malicious 0.00000226
• only_bottom_left -> control 0.00000000 / malicious 0.00000226
• same_cells_inner_pixels -> control 0.00000000 / malicious 0.95257413

Reproduce

python reproduce.py