BERT-Tiny Multi-Attack Demo

DO NOT USE IN PRODUCTION. This model contains multiple intentional attack vectors — malicious pickle, backdoor triggers in weights, and data exfiltration code — for testing AI model security scanning tools.

perfecXion.ai | Single-Attack Demo | Chronos Poisoned Demo | Chronos Benign Pickle

---

Purpose

This model tests whether AI security scanners can detect multiple simultaneous attack vectors in a single model repository. Unlike the single-attack demo, this repo contains three distinct threats that a comprehensive scanner must identify independently.

What's Poisoned

Expected Scanner Behavior

A comprehensive model security scanner should:

• Flag malicious_optimizer_state.pkl — pickle deserialization attack (CRITICAL)
• Flag pytorch_model.bin — backdoor triggers in model weights (HIGH)
• Flag train.py — data exfiltration code (HIGH)
• Allow config.json — standard configuration

---

Model Details

---

Security Test Model Family

---

Citation

@misc{thornton2025modelsecurity,
  title={AI Model Security Testing: Multi-Vector Poisoned Model Demonstrations},
  author={Thornton, Scott},
  year={2025},
  publisher={perfecXion.ai},
  url={https://perfecxion.ai}
}

---

License

Apache 2.0