流程背后的疏漏：发现并揭开 Azure MLOps 中存在漏洞的工具套件的神秘面纱.pdf

1、#BHAS BlackHatEventsThe Oversights under The FlowDiscovering and Demystifying the Vulnerable Tooling Suites from Azure MLOpsPeng Zhou()Shanghai University#BHAS BlackHatEventsPeng Zhou(zpbrent)Associate Professor at Shanghai University Bug Hunter for Web/3 and AI/LLM OSS Vulnerabilities Reach me out

2、at:https:/zpbrent.github.io/whoami#BHAS BlackHatEventsAgenda The Flow for Azure MLOps The Tooling Suites We Focus The Oversights,Vulnerabilities,and Impacts Oversights within Coordinated Disclosure Countermeasure&Takeaway#BHAS BlackHatEvents The Flow for Azure MLOps The Tooling Suites We Focus The O

3、versights,Vulnerabilities,and Impacts Oversights within Coordinated Disclosure Countermeasure&Takeaway Agenda#BHAS BlackHatEventsThe Flow for Azure DevOps1 https:/ BlackHatEventsFrom DevOps to MLOps2 https:/ BlackHatEventsThe ML Flow in Azure MLOps3 https:/www.c- BlackHatEvents The Flow for Azure ML

4、Ops The Tooling Suites We Focus The Oversights,Vulnerabilities,and Impacts Oversights within Coordinated Disclosure Countermeasure&Takeaway Agenda#BHAS BlackHatEventsAzure AI+ML Architecture4 https:/ OpenAIAzure Machine Learning WorkspaceOn-premise NetworksDevOpsMLOpsdeployLLM enabledEnd usersAzure

5、APPs#BHAS BlackHatEventsVulnerable Tooling Suites:Overview#BHAS BlackHatEventsMLOps=Machine Learning+DevOps#BHAS BlackHatEventsVulnerable Tooling Suites in Azure MLOps#BHAS BlackHatEvents The Flow for Azure MLOps The Tooling Suites We Focus The Oversights,Vulnerabilities,and Impacts Oversights withi

6、n Coordinated Disclosure Countermeasure&Takeaway Agenda#BHAS BlackHatEventsPrompt Flow in Azure MLBuild high-quality LLM apps-from prototyping,and testing to production deployment and monitoring5 https:/ BlackHatEventsExample in Azure ML Workspace The core feature for Azure ML Studio&A Tool for Azur