Secure your machine learning with Semgrep
blog.trailofbits.com | blog | #ai-security | #supply-chain | #machine-learning | #static-analysis | #semgrep | #pytorch | #pickle-deserialization
Summary
Trail of Bits added 11 Semgrep rules for machine learning library misuse, flagging unsafe pickle deserialization in PyTorch Distributed and other insecure patterns in ML pipelines.
- Published
- Collected
--- id: 1748 title: "Secure your machine learning with Semgrep" source_domain: blog.trailofbits.com source_url: "https://blog.trailofbits.com/2022/10/03/semgrep-maching-learning-static-analysis/" published_at: "2022-10-03T13:00:53Z" tags: ["ai-security", "supply-chain", "machine-learning", "static-analysis", "semgrep", "pytorch", "pickle-deserialization"] phying_url: "https://phying.com/item/1748" lang: en --- # Secure your machine learning with Semgrep ## Summary Trail of Bits added 11 Semgrep rules for machine learning library misuse, flagging unsafe pickle deserialization in PyTorch Distributed and other insecure patterns in ML pipelines. ## Intelligence Metadata - **Sources:** blog.trailofbits.com - **Published:** 2022-10-03T13:00:53Z - **Original:** https://blog.trailofbits.com/2022/10/03/semgrep-maching-learning-static-analysis/ - **Phying News:** https://phying.com/item/1748