Title: Week 10 Resources
Course: AIINFRA 302: AI Security, Guardrails & Governance > Section: Week 10 — Model Provenance and AI Supply-Chain Security

📚 Resources

- G7 / CISA guidance on SBOM for AI: https://industrialcyber.co/sbom/cisa-g7-partners-release-sbom-for-ai-guidance-to-boost-ai-supply-chain-transparency-and-cybersecurity-resilience/
- Sigstore (Cosign, Fulcio, Rekor) for model/artifact signing: https://openssf.org/tag/sigstore/
- Safetensors format and Hugging Face model scanning: https://huggingface.co/docs/microsoft-azure/security
- ModelScan (Protect AI): https://github.com/protectai/modelscan
- Safetensors audited as really safe — Hugging Face blog: https://huggingface.co/blog/safetensors-security-audit
- ML-BOM — CycloneDX: https://cyclonedx.org/capabilities/mlbom/

Week 11 · AI Governance Frameworks: NIST AI RMF, ISO/IEC 42001, and the EU AI Act

Notion ID: 392c08fd-0278-8120-be8e-f73de0e02297 Notion URL: https://app.notion.com/p/392c08fd02788120be8ef73de0e02297