ColdwaterQ: Backdooring Python Pickle — Why Things Got Worse Over the Last Decade
A DEF CON 30 talk about the security risks of using the Python Pickle serialization format. Although Pickle has long been known to be insecure, modern machine learning frameworks still use it to store models.
The speaker demonstrates how easily a backdoor can be embedded into a serialized object — including machine learning models — and presents practical examples of such attacks.
The speaker demonstrates how easily a backdoor can be embedded into a serialized object — including machine learning models — and presents practical examples of such attacks.