Hugging Face Blog

How Hugging Face Scaled Secrets Management for AI Infrastructure

arXiv AI
Aug 3

MOSAIC: Masked Outsourcing of Secure AI Computations

arXiv:2607. 29221v1 Announce Type: cross Abstract: We address the challenge of securely and efficiently outsourcing AI computations from a trusted but computationally weak client to an untrusted but powerful server, in the setting where the client holds both the input and the model, and the server must learn neither.

By James Hsin-yu Chiang, Sheila Zingg, Kari Kostiainen, Srdjan Capkun
arXiv Machine Learning
Oct 12

AI Models Can Provably Hide Arbitrary Capabilities

The paper demonstrates that hidden capabilities in AI models can be provably concealed by embedding encrypted neural networks as backdoors within the host model’s weights. These hidden circuits are designed to decrypt and activate only when a secret trigger is provided, and they remain difficult to elicit or interpret even with full access to the model weights, thanks to cryptographic guarantees. The authors implement these constructions in PyTorch and test their resistance against various elicitation techniques on a chemical reaction prediction task, showing that current audit methods cannot reliably uncover such hidden behaviors.

By Andis Draguns, Sumeet Ramesh Motwani, Raymond Douglas, Christian Schroeder de Witt
arXiv AI
Jul 21

Signal-based Model Access Risk Analysis for AI System Operations Security

arXiv:2607. 16414v1 Announce Type: cross Abstract: Artificial intelligence (AI) systems are now ubiquitous across domains such as security, finance, healthcare, consumer technology, and large-scale cloud services, where they process massive volumes of data and make consequential decisions daily.

By Maria Mahbub, Steven Young, Amir Sadovnik, Edmon Begoli, Chris Rugenstein, Donald Coulter, Anthony Ayodele