← NSFGrants
HomeNsf Awards

Collaborative Research: SaTC 2.0: RES: AIGIS: Securing the Deep Learning Model Supply Chai — NSF Award to Brown University (RI, $4

Pre-trained AI models shared through open online repositories are becoming essential infrastructure for research, industry, and government. But this growing reliance also creates an important cybersecurity concern: just as traditional software can be attacked to include viruses or access backdoors, AI models can also b

Award titleCollaborative Research: SaTC 2.0: RES: AIGIS: Securing the Deep Learning Model Supply Chai
Award ID2526622
AwardeeBrown University
CityPROVIDENCE
StateRI
Amount obligated$400,000
Principal investigatorVasileios Kemerlis
ProgramSecure &Trustworthy Cyberspace
Start date10/01/2026
AbstractPre-trained AI models shared through open online repositories are becoming essential infrastructure for research, industry, and government. But this growing reliance also creates an important cybersecurity concern: just as traditional software can be attacked to include viruses or access backdoors, AI models can also be tampered with. This can lead to security breaches and errors in systems that rely on these pre-trained models. This project will develop methods and tools to help users verify wh
SourceNSF Awards

🔍 Search all NSF awards →