DITTO: A Context-aware Pickle-based Pre-Trained Model Scanner for Effective Security Audits
DITTO is a new scanner designed to find security risks in models that use Pickle, a common but unsafe serialization format. It works by tracing how the model loads and then analyzing the context of critical operations to distinguish safe reconstruction from malicious behavior. DITTO achieved 100% scanning coverage and zero false negatives on a benchmark.