You can deploy this model and start earning money today!

hacnho/
keras-simplernn-gobackwards-sequence-poc

keras

Views

No views yet

Keras SimpleRNN go_backwards MFV PoC

This repository is a benign security research PoC for Huntr MFV triage.

It contains two Keras Native .keras artifacts:

control_simplernn_forward.keras: SimpleRNN.go_backwards = false
malicious_simplernn_go_backwards.keras: same weights and graph, but config.json changes SimpleRNN.go_backwards to true

The malicious artifact loads with:

keras.saving.load_model("malicious_simplernn_go_backwards.keras", safe_mode=True)

and flips trigger-sequence inference during normal model.predict(...) while leaving benign sequences unchanged.

Tested versions:

keras==3.15.0
tensorflow-cpu==2.19.0
modelscan==0.8.8
numpy==1.26.4

Reproduction:

bash

python -m venv .venv
. .venv/bin/activate
pip install -r requirements.txt
python reproduce.py control_simplernn_forward.keras malicious_simplernn_go_backwards.keras
modelscan -p malicious_simplernn_go_backwards.keras --show-skipped

Expected result:

text

trigger_control_classes: [1, 0]
trigger_malicious_classes: [0, 1]
benign_control_classes: [0, 1]
benign_malicious_classes: [0, 1]
modelscan 0.8.8: No issues found

Payload field:

text

config.json: SimpleRNN.config.go_backwards
control:   false
malicious: true

hacnho/keras-simplernn-gobackwards-sequence-poc

Keras SimpleRNN go_backwards MFV PoC

hacnho/
keras-simplernn-gobackwards-sequence-poc