A survey of twelve model registries, the trust they place in uploaded artifacts and four classes of attack against them.
Poisoned weights: supply chain attacks on ML model registries
A survey of twelve model registries, the trust they place in uploaded artifacts and four classes of attack against them.