Hugging Face's logo Hugging Face
  • Models
  • Datasets
  • Spaces
  • Buckets new
  • Docs
  • Enterprise
  • Pricing
    • Website
      • Tasks
      • HuggingChat
      • Collections
      • Languages
      • Organizations
    • Community
      • Blog
      • Posts
      • Daily Papers
      • Hardware
      • Learn
      • Discord
      • Forum
      • GitHub
    • Solutions
      • Team & Enterprise
      • Hugging Face PRO
      • Enterprise Support
      • Inference Providers
      • Inference Endpoints
      • Storage Buckets

  • Log In
  • Sign Up

athifatharmn
/
keras-duplicate-weights-backdoor-poc

Image Classification
Keras
model-security
model-file-vulnerability
backdoor
scanner-bypass
proof-of-concept
Model card Files Files and versions
xet
Community

Instructions to use athifatharmn/keras-duplicate-weights-backdoor-poc with libraries, inference providers, notebooks, and local apps. Follow these links to get started.

  • Libraries
  • Keras

    How to use athifatharmn/keras-duplicate-weights-backdoor-poc with Keras:

    # Available backend options are: "jax", "torch", "tensorflow".
    import os
    os.environ["KERAS_BACKEND"] = "jax"
    
    import keras
    
    model = keras.saving.load_model("hf://athifatharmn/keras-duplicate-weights-backdoor-poc")
    
  • Notebooks
  • Google Colab
  • Kaggle
keras-duplicate-weights-backdoor-poc
258 kB
Ctrl+K
Ctrl+K
  • 1 contributor
History: 7 commits
athifatharmn's picture
athifatharmn
Add model card metadata
8746706 verified 3 months ago
  • models
    Add evidence bundle folder 3 months ago
  • outputs
    Add evidence bundle folder 3 months ago
  • scripts
    Add evidence bundle folder 3 months ago
  • .gitattributes
    1.52 kB
    initial commit 3 months ago
  • README.md
    1.58 kB
    Add model card metadata 3 months ago
  • cnn_image_backdoor_clean_baseline.keras
    17.6 kB
    Add clean CNN baseline model 3 months ago
  • cnn_image_backdoor_duplicate_weights_trigger.keras
    2.79 kB
    Add poisoned duplicate-entry CNN model 3 months ago
  • cnn_image_backdoor_pipeline_normalized.keras
    17.5 kB
    Add normalized single-entry backdoored CNN model 3 months ago
  • evidence_bundle_keras_duplicate_weights_backdoor.zip

    Pickle imports

    • No problematic imports detected

    What is a pickle import?

    41.1 kB
    xet
    Add zipped evidence bundle 3 months ago