Published September 1, 2025
| Version v1
Software
Open
PickleBall: Secure Deserialization of Pickle-based Machine Learning Models - Artifact
Authors/Creators
-
1.
Columbia University
-
2.
Brown University
-
3.
Purdue University West Lafayette
-
4.
Google (United States)
-
5.
Technion – Israel Institute of Technology
- 6. Purdue University
Description
This artifact is associated with the paper "PickleBall: Secure Deserialization of Pickle-based Machine Learning Models" to appear at ACM CCS 2025. It contains:
- PickleBall source code and scripts: pickleball.tar.gz
- Dataset of malicious models: malicious.tar.gz
- Dataset of benign models: benign.tar.gz.partaa, benign.tar.gz.partab, ... benign.tar.gz.partba
- Abridged dataset of bengin models: benign-abridged.tar.gz
- Survey dataset: data.tar.gz
Evaluators should refer to the Artifact Appendix distributed with the PickleBall paper, as well as the README files in the `pickleball.tar.gz` repository: `README.md`, `evaluation/README.md`, and `surveys/README.md`.
Files
Files
(161.3 GB)
| Name | Size | |
|---|---|---|
|
md5:144afa75b59feaffaff970e7a1af62c6
|
9.6 GB | Download |
|
md5:141420905a88c92a12fc05fd925417a9
|
5.4 GB | Download |
|
md5:d2ae904675b23a112e7ae4a9e8473b65
|
5.4 GB | Download |
|
md5:f183a036a1c0c2b086d5e36679cb7f3b
|
5.4 GB | Download |
|
md5:56e4578f9cd83d6aa239947b267f69e1
|
5.4 GB | Download |
|
md5:0d0ff4fb2924bb416d1e02519a99a1fd
|
5.4 GB | Download |
|
md5:90bccd1a2714c63f413b1dd7ec847e86
|
5.4 GB | Download |
|
md5:415b41c934750a7520c414d2f2fe28bd
|
5.4 GB | Download |
|
md5:4e8a0aedb3206682c6875cfd40d4cb66
|
5.4 GB | Download |
|
md5:f29b3f8672ee3f8807a265683798311c
|
5.4 GB | Download |
|
md5:73bbb35acb7ccc1079f697381a23b917
|
5.4 GB | Download |
|
md5:5b16a2ef499cf5f688dc487427327fad
|
5.4 GB | Download |
|
md5:633cab43557186274277298bdf5d8732
|
5.4 GB | Download |
|
md5:86e22fee1abb6cedb1c3cfd9e08213c4
|
5.4 GB | Download |
|
md5:35babfb1705eca33649b806f43461421
|
5.4 GB | Download |
|
md5:f282f1c5d3e52ca4f552b9e28e54d4ea
|
5.4 GB | Download |
|
md5:e44bbde26ab3933ce055a5869ce16200
|
5.4 GB | Download |
|
md5:4bf2d9b0ae94279c1f759bed7b857a9b
|
5.4 GB | Download |
|
md5:55b82a6361efbc4c30f0f6d5ac1deba7
|
5.4 GB | Download |
|
md5:a5db3e1d817182d55f4973aadc895882
|
5.4 GB | Download |
|
md5:1c9c99d67b19ef30841915b734ed850d
|
5.4 GB | Download |
|
md5:1e197a89c33fe55ba4e91c1c6d97d5bc
|
5.4 GB | Download |
|
md5:45d1aa2a38446a2d44ea3d46ff7bebcf
|
5.4 GB | Download |
|
md5:622b1d6657ed48732bce6479788d4c99
|
5.4 GB | Download |
|
md5:8a4dc87dc68621e95c029022e72421a0
|
5.4 GB | Download |
|
md5:0d35be74ce6e84dbe5b6dc586971510f
|
5.4 GB | Download |
|
md5:e06a98b684fae1ea47fa16aa883b41b7
|
5.4 GB | Download |
|
md5:10769ef9ca366069d538b24f60d1ddf4
|
1.5 GB | Download |
|
md5:0b9545ec7ddd510618a1060786353869
|
414.4 MB | Download |
|
md5:6cb39e6ed8f1e9f12d64fdec91655ddd
|
10.2 GB | Download |
|
md5:147a7e5331434ca9fc21dfe642e9eb2a
|
6.2 MB | Download |
Additional details
Software
- Repository URL
- https://github.com/columbia/pickleball