Open Source Coalition Announces 'Model-Signing' with Sigstore to Strengthen the ML Supply Chain

Open Source Coalition Announces 'Model-Signing' with Sigstore to Strengthen the ML Supply Chain

The advent of LLMs and machine learning-based applications "opened the door to a new wave of security threats," argues Google's security blog. (Including model and data poisoning, prompt injection, prompt leaking and prompt evasion.) So as part of the Linux Foundation's nonprofit Open Source Security Foundation, and in partnership with NVIDIA and HiddenLayer, Google's Open Source Security Team on Friday announced the first stable model-signing l…

Taming the Wild West of ML: Practical Model Signing with Sigstore

Posted by Mihai Maruseac, Google Open Source Security Team (GOSST) In partnership with NVIDIA and HiddenLayer, as part of the Open Source Security Foundation, we are now launching the first stable version of our model …

Launch of Model Signing v1.0: OpenSSF AI/ML Working Group Secures the Machine Learning Supply Chain – Open Source Security Foundation

By Mihai Maruseac, Google Open Source Security Team, OpenSSF AI/ML WG lead; Martin Sablotny, NVIDIA, model signing co-lead; Eoin Wickens, HiddenLayer, model signing co-lead; Daniel Major, NVIDIA, model signing co-lead We are pleased to announce the launch of version 1.0 of the model-signing project, an OpenSSF project developed in the past year as part of the OpenSSF AI/ML working group. The aim of the project is to provide a library and CLI for…