{"id":113971,"date":"2024-02-29T18:25:41","date_gmt":"2024-02-29T16:25:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-repozitorii-hugging-face-vyyavleny-vredonosnye-ai-modeli-vypolnyayushhie-kod"},"modified":"2024-02-29T18:25:41","modified_gmt":"2024-02-29T16:25:42","slug":"v-repozitorii-hugging-face-vyyavleny-vredonosnye-ai-modeli-vypolnyayushhie-kod","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/v-repozitorii-hugging-face-vyyavleny-vredonosnye-ai-modeli-vypolnyayushhie-kod","title":{"rendered":"V repozit\u00e1\u0159i Hugging Face byly odhaleny \u0161kodliv\u00e9 AI modely, kter\u00e9 vykon\u00e1vaj\u00ed k\u00f3d.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V\u00fdzkumn\u00edci ze spole\u010dnosti JFrog objevili v repozit\u00e1\u0159i Hugging Face \u0161kodliv\u00e9 modely strojov\u00e9ho u\u010den\u00ed, jejich\u017e instalace m\u016f\u017ee v\u00e9st k proveden\u00ed k\u00f3du \u00fato\u010dn\u00edka a z\u00edsk\u00e1n\u00ed kontroly nad syst\u00e9mem u\u017eivatele. Probl\u00e9m je zp\u016fsoben t\u00edm, \u017ee n\u011bkter\u00e9 form\u00e1ty distribuce model\u016f umo\u017e\u0148uj\u00ed vkl\u00e1d\u00e1n\u00ed spustiteln\u00e9ho k\u00f3du, nap\u0159\u00edklad modely vyu\u017e\u00edvaj\u00edc\u00ed form\u00e1t \u201epickle\u201c mohou zahrnovat serializovan\u00e9 objekty v jazyce Python, stejn\u011b jako k\u00f3d vykon\u00e1van\u00fd p\u0159i na\u010d\u00edt\u00e1n\u00ed souboru, a modely Tensorflow Keras mohou vykon\u00e1vat k\u00f3d prost\u0159ednictv\u00edm Lambda Layer. <\/p>\n

Aby se zabr\u00e1nilo \u0161\u00ed\u0159en\u00ed podobn\u00fdch nebezpe\u010dn\u00fdch model\u016f, v Hugging Face se prov\u00e1d\u00ed skenov\u00e1n\u00ed na z\u00e1klad\u011b substituce serializovan\u00e9ho k\u00f3du, ale zji\u0161t\u011bn\u00e9 nebezpe\u010dn\u00e9 modely ukazuj\u00ed, \u017ee existuj\u00edc\u00ed kontroly lze obej\u00edt. Krom\u011b toho Hugging Face ve v\u011bt\u0161in\u011b p\u0159\u00edpad\u016f pouze ozna\u010duje modely jako nebezpe\u010dn\u00e9, ani\u017e by zablokoval jejich p\u0159\u00edstup. Celkem bylo identifikov\u00e1no p\u0159ibli\u017en\u011b 100 potenci\u00e1ln\u011b \u0161kodliv\u00fdch model\u016f, z nich\u017e 95 % je ur\u010deno pro pou\u017eit\u00ed s r\u00e1mci PyTorch a 5 % s Tensorflow. Nej\u010dast\u011bj\u0161\u00edmi nebezpe\u010dn\u00fdmi zm\u011bnami jsou zmocn\u011bn\u00ed objektu, zaji\u0161t\u011bn\u00ed extern\u00edho p\u0159\u00edstupu do syst\u00e9mu (reverse shell), spou\u0161t\u011bn\u00ed aplikac\u00ed a z\u00e1pis do souboru.

\"V<\/center> <\/p>\n

Upozor\u0148uje se, \u017ee soud\u011b podle \u010din\u016f v\u011bt\u0161iny zji\u0161t\u011bn\u00fdch nebezpe\u010dn\u00fdch model\u016f byly vytvo\u0159eny v\u00fdzkumn\u00edky v oblasti bezpe\u010dnosti, kte\u0159\u00ed se sna\u017e\u00ed z\u00edskat odm\u011bnu za odhalen\u00ed zranitelnost\u00ed a metod obch\u00e1zen\u00ed ochrany Hugging Face (nap\u0159\u00edklad m\u00edsto skute\u010dn\u00e9ho \u00fatoku se sna\u017e\u00ed tyto modely spustit kalkula\u010dku nebo odeslat s\u00ed\u0165ov\u00fd po\u017eadavek s informacemi o \u00fasp\u011bchu \u00fatoku). Objevuj\u00ed se tak\u00e9 p\u0159\u00edpady, kdy doch\u00e1z\u00ed k spu\u0161t\u011bn\u00ed reverzn\u00edho shellu k p\u0159ipojen\u00ed \u00fato\u010dn\u00edka k syst\u00e9mu. <\/p>\n

Nap\u0159\u00edklad modely \u201eballer423\/goober2\u201c a \u201estar23\/baller13\u201c c\u00edl\u00ed na proveden\u00ed \u00fatoku na syst\u00e9my, kter\u00e9 na\u010d\u00edtaj\u00ed soubor modelu v PyTorch pomoc\u00ed funkce torch.load(). K proveden\u00ed k\u00f3du je vyu\u017eita metoda \u201e__reduce__\u201c z modulu pickle, kter\u00e1 umo\u017e\u0148uje vkl\u00e1dat libovoln\u00fd Python-k\u00f3d do procesu deserializace, kter\u00fd se prov\u00e1d\u00ed p\u0159i na\u010d\u00edt\u00e1n\u00ed modelu.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 JFrog \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 Hugging Face \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0437\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0444\u043e\u0440\u043c\u0430\u0442\u044b \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0442 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043c\u043e\u0434\u0435\u043b\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0444\u043e\u0440\u043c\u0430\u0442 «pickle», \u043c\u043e\u0433\u0443\u0442 \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u044b \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Python, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u043e\u0434, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":113972,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113971","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47V repozit\u00e1\u0159i Hugging Face byly odhaleny \u0161kodliv\u00e9 AI modely, kter\u00e9 vykon\u00e1vaj\u00ed k\u00f3d | ProHoster","description":"V\u00fdzkumn\u00edci ze spole\u010dnosti JFrog objevili v repozit\u00e1\u0159i Hugging Face nebezpe\u010dn\u00e9 modely strojov\u00e9ho u\u010den\u00ed, jejich\u017e instalace m\u016f\u017ee v\u00e9st k vykon\u00e1n\u00ed k\u00f3du \u00fato\u010dn\u00edka a p\u0159evzet\u00ed kontroly nad syst\u00e9mem u\u017eivatele.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-repozitorii-hugging-face-vyyavleny-vredonosnye-ai-modeli-vypolnyayushhie-kod","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 Hugging Face \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 AI-\u043c\u043e\u0434\u0435\u043b\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0438\u0435 \u043a\u043e\u0434 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 JFrog \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 Hugging Face \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0437\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-repozitorii-hugging-face-vyyavleny-vredonosnye-ai-modeli-vypolnyayushhie-kod","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-02-29T16:25:42+00:00","article:modified_time":"2024-02-29T16:25:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/113971","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=113971"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/113971\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/113972"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=113971"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=113971"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=113971"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}