TAMING THE WILD WEST OF ML: PRACTICAL MODEL SIGNING WITH SIGSTORE

Summary from the TLDR InfoSec newsletter

Google launched a stable version of its model-signing library with NVIDIA and HiddenLayer to secure the machine learning supply chain. The library enables users to verify that a model used in an application is the one created by developers using digital signatures like those from Sigstore. This counters security threats from the multi-stage ML development (training, fine-tuning, and deployment), where malicious actors can tamper with models via weight alterations, backdoors, or code injection.