Framework for verifying integrity of pretrained AI models
Project description
Mithridatium 🛡️
A framework for verifying the integrity of pretrained AI models
Mithridatium is a research-driven project aimed at detecting backdoors and data poisoning in downloaded pretrained models or pipelines (e.g., from Hugging Face).
Our goal is to provide a modular, command-line tool that helps researchers and engineers trust the models they use.
🚀 Project Overview
Modern ML pipelines often reuse pretrained weights from online repositories.
This comes with risks:
- ❌ Backdoors — models behave normally until triggered by a specific pattern.
- ❌ Data poisoning — compromised training data leading to biased or malicious models.
Mithridatium analyzes pretrained models to flag potential compromises using multiple defenses from academic research.
Other Functionaly will be updated as the project goes on
Quickstart
python -m venv .venv && source .venv/bin/activate
pip install -e .
pip install pytest pytest-cov
# (A) Train demo models (fast settings)
#Clean model on 5 epochs (Increase epochs for better accuracy, but it will take longer)
python -m scripts.train_resnet18 --dataset clean --epochs 5 --output_path models/resnet18_clean.pth
#Poisoned model on 5 epochs (Increase epochs for better accuracy, but it will take longer)
python -m scripts.train_resnet18 --dataset poison --train_poison_rate 0.1 --target_class 0 \
--epochs 5 --output_path models/resnet18_poison.pth
# (B) Run detection
mithridatium detect --model models/resnet18_poison.pth --defense mmbd --data cifar10 --out reports/mmbd.json
# (C) See summary
cat reports/mmbd.json
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file mithridatium-0.1.0.tar.gz.
File metadata
- Download URL: mithridatium-0.1.0.tar.gz
- Upload date:
- Size: 12.7 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.13.0
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
6c19ac06e2d383b938b22807f51c7d33a5a1bc514f689f674e3c8baca01041c6
|
|
| MD5 |
9f86ce01539041de69fb9ea0b7d89d66
|
|
| BLAKE2b-256 |
c3718edf447c9b205eb29f95e5a0ee151df672ec652534411c082cde706e6872
|
File details
Details for the file mithridatium-0.1.0-py3-none-any.whl.
File metadata
- Download URL: mithridatium-0.1.0-py3-none-any.whl
- Upload date:
- Size: 12.1 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.13.0
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
be6d996c8c6dd6cea7b0f2f11b36e558a5bd392e324bc4abc495ee535af68ec3
|
|
| MD5 |
3dc7d1ba528ecbe672bf4473b45d8391
|
|
| BLAKE2b-256 |
39979cc0ddb6ad2378767ca669e78819124b2bb676d21cc036ab4fb06694e22d
|