Re: [PR] [SPARK-54784] Document the security policy on ml models [spark-website]

["celestehorgan (via GitHub)" <gi...@apache.org>]

celestehorgan commented on code in PR #676:
URL: https://github.com/apache/spark-website/pull/676#discussion_r2798797714


##########
security.md:
##########
@@ -43,6 +43,19 @@ internet or untrusted networks. We recommend access within trusted networks (com
 private cloud environments), using restrict access to the Spark cluster with robust authentication, 
 authorization, and network controls.
 
+<h3>Is loading a machine learning model secure? Who is responsible for model security?</h3> 
+
+Loading an Apache Spark ML model is equivalent to loading and executing code within the Spark runtime.
+
+Spark ML models may contain serialized objects, custom transformers, user-defined expressions, and execution graphs. 

Review Comment:
   ```suggestion
   Spark ML models might contain serialized objects, custom transformers, user-defined expressions, and execution graphs. 
   ```
   
   May --> Permission ("May I go to the park?") 
   Might --> Uncertainty ("I might go to the park")



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@spark.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@spark.apache.org
For additional commands, e-mail: commits-help@spark.apache.org