AI-Infra-Guard

🛡️ AI Infrastructure Security Assessment System

中文版

AI Infra Guard is an efficient, lightweight, and user-friendly AI infrastructure security assessment tool designed to discover and detect potential security risks in AI systems.

🚀 Quick Preview

WEBUI Command line

🚀 Project Highlights

• Efficient Scanning* Supports 28 AI framework fingerprint identifications

  • Covers 200+ security vulnerability databases

• Easy to Use

  • Ready to use out of the box, no complex configuration
  • Fingerprint and vulnerability YAML rule definitions
  • Flexible matching syntax

• Lightweight

  • Clean and efficient core components
  • Small binary size, low resource usage
  • Cross-platform support

📊 AI Component Coverage

📦 Installation and Usage

Installation

Download from: https://github.com/Tencent/AI-Infra-Guard/releases

Usage

WEBUI

./ai-infra-guard -ws

Local Scan

./ai-infra-guard -localscan

Single Target

./ai-infra-guard -target [IP/Domain] 

Multiple Targets

./ai-infra-guard -target [IP/Domain] -target [IP/Domain]

Read from File

./ai-infra-guard -file target.txt

AI Analysis

./ai-infra-guard -target [IP/Domain] -ai -token [Hunyuan token]

🔍 Fingerprint Matching Rules

AI Infra Guard is based on WEB fingerprint identification components. Fingerprint rules are in the data/fingerprints directory, and vulnerability matching rules are in the data/vuln directory.

Example: Gradio Fingerprint Rule

info:
  name: gradio
  author: Security Team
  severity: info
  metadata:
    product: gradio
    vendor: gradio
http:
  - method: GET
    path: '/'
    matchers:
      - body="<script>window.gradio_config = {" || body="document.getElementsByTagName(\"gradio-app\");"

🛠️ Fingerprint Matching Syntax

Matching Locations

• Title
• Body
• Header
• Icon hash

Logical Operators

• = Fuzzy match
• == Exact match
• != Not equal
• ~= Regular expression match
• && AND
• || OR
• () Grouping

🤝 Contributing

Community contributions are highly welcome! Feel free to submit PRs and Issues.

Star History

📄 License

"AI Infra Guard" is licensed under the MIT License except for the third-party components. Visit License.txt

💡 Tip: Stay updated to protect your AI infrastructure security!