For Heads-of · Practitioner
Model artifact signing and integrity verification
Cryptographic signing of trusted model artifacts and verification of that signature before a model is loaded into production.
- preventive
- integrity
- supply-chain
- model-security
What it does
Signs approved model weights and checkpoints at the point they are validated, and verifies the signature matches before the artifact is loaded anywhere in production, rejecting any unsigned or tampered artifact.
Where it fits
Closes the gap a backdoored or substituted model artifact would otherwise walk through undetected.
Risks this mitigates
The risks this control addresses, ranked by effectiveness.
Model backdoors and trojans
A hidden, trigger-activated backdoor is embedded in a model via poisoned training data, weight tampering, or a payload injected into the model artifact.
Data and model poisoning
Training, fine-tuning, or embedding data is deliberately manipulated to introduce vulnerabilities, backdoors, or bias into a model.
Framework and clause references
| Framework | Clause | Title |
|---|---|---|
| MITRE ATLAS | AML.T0018 | Backdoor ML Model |