Treffer: Malicious AI Models Undermine Software Supply-Chain Security.

This article sets out to prevent malicious artificial intelligence (AI) model attacks in the software supply chain. First, a workflow of AI model integration from a repository is detailed alongside threat modeling in five categories considering threat classification and attack payload. Limitations of current security systems, including Software Component Analysis and Software Bill of Materials, are detailed as well as recommendations in five areas to strengthen software supply-chain security.