Eclypsium Research Shows How Compromised Hardware Can Alter AI Models at Runtime

Eclypsium has demonstrated how compromised computing infrastructure can change an AI model's behavior during inference while its original files remain intact. The research, published October 29 in Trusted AI Requires Trusted Infrastructure, shows why checking a model's signature or file hash does not establish the integrity of the model executing in memory. In a controlled demonstration supported by NVIDIA, researchers used a compromised data processing unit, or DPU, together with permissive…

Read the original article:

Eclypsium Research Shows How Compromised Hardware Can Alter AI Models at Runtime