Towards Secure MLOps: Surveying Attacks, Mitigation Strategies, and Research Challenges
2025/05/30 by Raj Patel, Himanshu Tripathi, Patel, Raj +9 · 1 citation
Computer Science · #Network Security and Intrusion Detection #Advanced Malware Detection Techniques
paper · pdf · doi:10.48550/arxiv.2506.02032
Abstract
The rapid adoption of machine learning (ML) technologies has driven organizations across diverse sectors to seek efficient and reliable methods to accelerate model development-to-deployment. Machine Learning Operations (MLOps) has emerged as an integrative approach addressing these requirements by unifying relevant roles and streamlining ML workflows. As the MLOps market continues to grow, securing these pipelines has become increasingly critical. However, the unified nature of MLOps ecosystem introduces vulnerabilities, making them susceptible to adversarial attacks where a single misconfiguration can lead to compromised credentials, severe financial losses, damaged public trust, and the poisoning of training data. Our paper presents a systematic application of the MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems) framework, supplemented by reviews of white and grey literature, to systematically assess attacks across different phases of the MLOps ecosystem. We begin by reviewing prior work in this domain, then present our taxonomy and introduce a threat model that captures attackers with different knowledge and capabilities. We then present a structured taxonomy of attack techniques explicitly mapped to corresponding phases of the MLOps ecosystem, supported by examples drawn from red-teaming exercises and real-world incidents. This is followed by a taxonomy of mitigation strategies aligned with these attack categories, offering actionable early-stage defenses to strengthen the security of MLOps ecosystem. Given the gradual evolution and adoption of MLOps, we further highlight key research gaps that require immediate attention. Our work emphasizes the importance of implementing robust security protocols from the outset, empowering practitioners to safeguard MLOps ecosystem against evolving cyber attacks.
Citations
- Sentry: Authenticating Machine Learning Artifacts on the Fly
- Demystifying the Evolution of Neural Networks with BOM Analysis: Insights from a Large-Scale Study of 55,997 GitHub Repositories
- Navigating MLOps: Insights into Maturity, Lifecycle, Tools, and Careers
- Modern Hardware Security: A Review of Attacks and Countermeasures
- Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems
- Accurate and Scalable Detection and Investigation of Cyber Persistence Threats
- A Multivocal Review of MLOps Practices, Challenges and Open Issues
- Gemma: Open Models Based on Gemini Research and Technology
- Mitigating distribution shift in machine learning-augmented hybrid simulation
- A Comprehensive Survey of Hallucination Mitigation Techniques in Large Language Models
- A Comprehensive Survey of Attack Techniques, Implementation, and Mitigation Strategies in Large Language Models
- Poisoning Web-Scale Training Datasets is Practical
- Machine Learning Operations (MLOps): Overview, Definition, and Architecture
- On Continuous Integration / Continuous Delivery for Automated Deployment of Machine Learning Models using MLOps
- Anti-Backdoor Learning: Training Clean Models on Poisoned Data
- Who Needs MLOps: What Data Scientists Seek to Accomplish and How Can\n MLOps Help?
- Measuring Mathematical Problem Solving With the MATH Dataset
- DeepPayload: Black-box Backdoor Attack on Deep Learning Models through Neural Payload Injection
- Dataset Security for Machine Learning: Data Poisoning, Backdoor Attacks, and Defenses
- Data Poisoning Attacks Against Federated Learning Systems
- Increasing-Margin Adversarial (IMA) Training to Improve Adversarial Robustness of Neural Networks
- Imitation Attacks and Defenses for Black-box Machine Translation Systems
- MLPerf Inference Benchmark
- A Case Study on Using Deep Learning for Network Intrusion Detection
- Universal Adversarial Triggers for Attacking and Analyzing NLP
- Mitigating Unwanted Biases with Adversarial Learning
- Spectre Attacks: Exploiting Speculative Execution
- Spectre attacks
- Technical Report on the CleverHans v2.1.0 Adversarial Examples Library
- Adversarial examples in the physical world
- Atlas
- A Theory of Quantum Gravity from First Principles
Cited by
Related