Trojan Model Hubs - Hacking the ML Supply Chain and Defending Against Security Threats

This talk examines model serialization attacks that can execute malicious code when machine learning models are loaded. It demonstrates ModelScan for scanning model files and Sigstore for signing artifacts to help protect machine learning workflows.