Skip to content

Commit fc5ccbc

Browse files
committed
refactor: PR comments
1 parent 430e352 commit fc5ccbc

File tree

2 files changed

+8
-9
lines changed

2 files changed

+8
-9
lines changed
Lines changed: 7 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,14 @@
1-
# Third-party scanners
1+
# Third-party scanner: Protect AI
22

33
<Tip>
44
Interested in joining our security partnership / providing scanning information on the Hub? Please get in touch with us over at [email protected].*
55
</Tip>
66

7-
We partner with 3rd party scanning providers in order to make the Hub safer. The same way files are scanned by our internal scanning system, public repositories' files are scanned by the 3rd party scanners we integrate.
7+
[Protect AI](https://protectai.com/)'s [Guardian](https://protectai.com/guardian) catches both pickle and Keras exploits. Guardian also benefits from reports sent in by their community of bounty [Huntr](https://huntr.com/)s.
8+
9+
<!-- insert image of report -->
10+
11+
We partnered with Protect AI to provide scanning in order to make the Hub safer. The same way files are scanned by our internal scanning system, public repositories' files are scanned by Guardian.
812

913
Our frontend has been redesigned specifically for this purpose, in order to accomodate for new scanners:
1014

@@ -16,12 +20,7 @@ Here is an example repository you can check out to see the feature in action: [m
1620

1721
To share models, we serialize the data structures we use to interact with the models, in order to facilitate storage and transport. Some serialization formats are vulnerable to nasty exploits, such as arbitrary code execution (looking at you pickle), making sharing models potentially dangerous.
1822

19-
As Hugging Face has become the de facto platform for model sharing, we’d like to protect the community from this, hence why we have developed tools like [picklescan](https://github.com/mmaitre314/picklescan) and why we integrate 3rd party scanners.
23+
As Hugging Face has become a popular platform for model sharing, we’d like to protect the community from this, hence why we have developed tools like [picklescan](https://github.com/mmaitre314/picklescan) and why we integrate third party scanners.
2024

2125
Pickle is not the only exploitable format out there, [see for reference](https://github.com/Azure/counterfit/wiki/Abusing-ML-model-file-formats-to-create-malware-on-AI-systems:-A-proof-of-concept) how one can exploit Keras Lambda layers to achieve arbitrary code execution.
2226

23-
## Protect AI's Guardian
24-
25-
[Protect AI](https://protectai.com/)'s [Guardian](https://protectai.com/guardian) catches both pickle and Keras exploits. Guardian also benefits from reports sent in by their community of bounty [Huntr](https://huntr.com/)s.
26-
27-
<!-- insert image of report -->

docs/hub/security.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,5 +20,5 @@ For any other security questions, please feel free to send us an email at securi
2020
- [Malware Scanning](./security-malware)
2121
- [Pickle Scanning](./security-pickle)
2222
- [Secrets Scanning](./security-secrets)
23-
- [3rd party scanners](./security-third-party-scanners)
23+
- [Third-party scanner: Protect AI](./security-third-party-scanner-protect-ai)
2424
- [Resource Groups](./security-resource-groups)

0 commit comments

Comments
 (0)