Skip to content

Latest commit

 

History

History
27 lines (18 loc) · 2.32 KB

SECURITY.md

File metadata and controls

27 lines (18 loc) · 2.32 KB
Raw

Security for LuoJiaNET training

Security Risk Description

  1. When LuoJiaNET is used for AI model training, if the user-defined computational graph structure (for example, Python code for generating the LuoJiaNET computational graph) is provided by an untrusted third party, malicious code may exist and will be loaded and executed to attack the system.
  2. Model files are stored in binary mode. When LuoJiaNET is used to optimize or infer AI models and the model files are loaded in deserialization mode, once malicious code is written into the model files, the code are loaded and executed, causing attacks on the system.
  3. LuoJiaNET performs only model training and inference based on the data provided by users. Users need to protect data security to avoid privacy leakage.
  4. LuoJiaNET is a distributed training platform. When LuoJiaNET is used for distributed training, if an Ascend chip is used for training, a device provides a secure transmission protocol for gradient fusion. If GPUs or other clusters are used for training, identity authentication and secure transmission are not provided.

Security Usage Suggestions

  1. Run LuoJiaNET in the sandbox.
  2. Run LuoJiaNET as a non-root user.
  3. Ensure that the source of a computational graph structure is trustworthy. Do not write code irrelevant to model training in the network structure definition.
  4. Ensure that the source of a network model is trustworthy or enter secure network model parameters to prevent model parameters from being tampered with.
  5. Ensure that GPU distributed training is performed on an isolated cluster network.

Security for LuoJiaNET Lite

Security Risk Description

When run a model using LuoJiaNET Lite, the value from the model will be read and used as the parameter or input of a operator, if the value read from the model is invalid, it may cause unexpected result. For example, if the invalid value is used as the offset of a vector, it may cause your app run into segmentation fault issue.

Security Usage Suggestions

  1. Make sure your model is well verified and protected.
  2. The exception catching mechanism of C++ is an effective method to improve robustness of your app, consider adding code to catch exception when calling the LuoJiaNET Lite API, as exception will be raised in some case such as the example mentioned in the risk description above.