supply chain security

(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure

We show that the ML execution environment itself is an unguarded attack surface, presenting a parasitic runtime Trojan that observes live tensor state to exfiltrate hyperparameters and amplify weak poisoning into 100%-success backdoors.

Habibur Rahaman, Qipan Xu, Zafaryab Haider, Prabuddha Chakraborty, Swarup Bhunia, Fnu Suya