Collaborative Research: SaTC 2.0: RES: AIGIS: Securing the Deep Learning Model Supply Chain

NSF Award Search · 01002627DB NSF RESEARCH & RELATED ACTIVIT · $410,000 · view on nsf.gov ↗

Abstract

Pre-trained AI models shared through open online repositories are becoming essential infrastructure for research, industry, and government. But this growing reliance also creates an important cybersecurity concern: just as traditional software can be attacked to include viruses or access backdoors, AI models can also be tampered with. This can lead to security breaches and errors in systems that rely on these pre-trained models. This project will develop methods and tools to help users verify whether a pre-trained AI model is trustworthy before it is incorporated into scientific workflows, operational systems, or other important computing environments. By improving the security of this emerging AI infrastructure, the project will help strengthen the U.S. research enterprise, support economic competitiveness, and improve the resilience of AI-enabled systems. The project will also advance education and workforce development by training students, providing research opportunities, and fostering collaboration among universities, industry, and other stakeholders. This project develops a novel approach to address three major security challenges in the machine learning (ML) model supply chain. The research integrates software engineering principles with machine learning techniques to systematically mitigate vulnerabilities during model selection, loading, and management. First, the team of researchers will tackle model spoofing, where adversaries upload malicious models using dece

Key facts

NSF award ID
2526621
Awardee
Purdue University (IN)
SAM.gov UEI
YRXVL4JYCEF5
PI
James C Davis
Primary program
01002627DB NSF RESEARCH & RELATED ACTIVIT
All programs
SaTC: Secure and Trustworthy Cyberspace, Artificial Intelligence (AI), Nat Security, Secure Border & Pub Safety, REU SUPP-Res Exp for Ugrd Supp
Estimated total
$410,000
Funds obligated
$410,000
Transaction type
Standard Grant
Period
10/01/2026 → 09/30/2030