Skip to main content

Framework for verifying integrity of pretrained AI models

Project description

Mithridatium 🛡️

A framework for verifying the integrity of pretrained AI models

Mithridatium is a research-driven project aimed at detecting backdoors and data poisoning in downloaded pretrained models or pipelines (e.g., from Hugging Face).
Our goal is to provide a modular, command-line tool that helps researchers and engineers trust the models they use.


🚀 Project Overview

Modern ML pipelines often reuse pretrained weights from online repositories.
This comes with risks:

  • ❌ Backdoors — models behave normally until triggered by a specific pattern.
  • ❌ Data poisoning — compromised training data leading to biased or malicious models.

Mithridatium analyzes pretrained models to flag potential compromises using multiple defenses from academic research.


Other Functionaly will be updated as the project goes on

Quickstart

python -m venv .venv && source .venv/bin/activate
pip install -e .
pip install pytest pytest-cov

# (A) Train demo models (fast settings)

#Clean model on 5 epochs (Increase epochs for better accuracy, but it will take longer)
python -m scripts.train_resnet18 --dataset clean  --epochs 5 --output_path models/resnet18_clean.pth

#Poisoned model on 5 epochs (Increase epochs for better accuracy, but it will take longer)
python -m scripts.train_resnet18 --dataset poison --train_poison_rate 0.1 --target_class 0 \
  --epochs 5 --output_path models/resnet18_poison.pth

# (B) Run detection
mithridatium detect --model models/resnet18_poison.pth --defense mmbd --data cifar10 --out reports/mmbd.json

# (C) See summary
cat reports/mmbd.json

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

mithridatium-0.1.0.tar.gz (12.7 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

mithridatium-0.1.0-py3-none-any.whl (12.1 kB view details)

Uploaded Python 3

File details

Details for the file mithridatium-0.1.0.tar.gz.

File metadata

  • Download URL: mithridatium-0.1.0.tar.gz
  • Upload date:
  • Size: 12.7 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.13.0

File hashes

Hashes for mithridatium-0.1.0.tar.gz
Algorithm Hash digest
SHA256 6c19ac06e2d383b938b22807f51c7d33a5a1bc514f689f674e3c8baca01041c6
MD5 9f86ce01539041de69fb9ea0b7d89d66
BLAKE2b-256 c3718edf447c9b205eb29f95e5a0ee151df672ec652534411c082cde706e6872

See more details on using hashes here.

File details

Details for the file mithridatium-0.1.0-py3-none-any.whl.

File metadata

  • Download URL: mithridatium-0.1.0-py3-none-any.whl
  • Upload date:
  • Size: 12.1 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.13.0

File hashes

Hashes for mithridatium-0.1.0-py3-none-any.whl
Algorithm Hash digest
SHA256 be6d996c8c6dd6cea7b0f2f11b36e558a5bd392e324bc4abc495ee535af68ec3
MD5 3dc7d1ba528ecbe672bf4473b45d8391
BLAKE2b-256 39979cc0ddb6ad2378767ca669e78819124b2bb676d21cc036ab4fb06694e22d

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page