How to Discover Open Source AI Models in Your Code
Blog post from Endor Labs
Endor Labs aims to secure various dependencies in software applications, including open source AI models, by leveraging their capabilities to discover, evaluate, and enforce policies for using these models from platforms such as Hugging Face. As open source AI models introduce unique risks due to the combination of code, weights, and training data from multiple sources, Endor Labs provides tools to help application security teams manage these risks effectively. By using advanced program analysis, Endor Labs can inventory dependencies, including those not explicitly declared, and offers features to evaluate AI models based on security, activity, popularity, and quality. This functionality supports compliance with frameworks like ISO/IEC 42001:2023 and NIST-AI-600-1 by enabling comprehensive risk assessments and security control implementations. Additionally, Endor Labs provides tools for discovering AI models within source code and enforcing guardrails for their usage, while also offering policies to manage licensing risks. Their AI model discovery process has shown an 80% accuracy rate in identifying AI models within code, even when the model names are not directly specified, reflecting a satisfactory approach to enhancing application security in the evolving landscape of AI technologies.
No tracked trend matches for this post yet.
Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.