Skip to main content

Latest in GPU Security 101

What NVFLARE Is: Federated Learning Infrastructure and the Distinct Attack Surface It Creates

NVIDIA Federated Learning Application Runtime Environment (NVFLARE) is the software that enables multiple institutions to collaboratively train AI models without sharing raw data.

NVIDIA Federated Learning Application Runtime Environment (NVFLARE) is the software that enables multiple institutions to collaboratively train AI models without sharing raw data. Each institution trains locally and shares only model updates with a central coordinator. NVFLARE is used in healthcare (multi-hospital AI model training without sharing patient records), finance (collaborative fraud detection models), and research (multi-institutional scientific AI). The federated learning architecture creates a distinct attack surface — one where network participants have legitimate access to a shared training infrastructure, where the trust boundary between participants and the coordinator must be software-enforced, and where the consequences of a security failure extend to every institution in the federation.

Older in GPU Security 101

What the NVIDIA AI Stack Is: Container Toolkit, GPU Operator, Triton, and How They Fit Together

Jun 28, 20263 MIN

What Full-Stack GPU Telemetry Means: From CUDA Kernel to Network Egress

Jun 28, 20264 MIN

What Kernel Hash Verification Means: Detecting Unauthorised GPU Code

Jun 28, 20264 MIN

What a CUDA Context Is: And Why Tracking It Per Container Matters for Security

Jun 28, 20264 MIN

What GPU Telemetry Exists Today: Utilisation, Memory, and Why None of It Is a Security Signal

Jun 28, 20264 MIN

Why Traditional Runtime Security Tools Don't Cover GPUs: What eBPF Sees and What It Misses

Jun 28, 20264 MIN

How Kubernetes Namespace Isolation Fails for GPU Workloads: Why RBAC Is Not Enough

Jun 28, 20264 MIN

vGPU vs MIG vs Time-Slicing: The Three GPU Sharing Models and Their Security Tradeoffs

Jun 28, 20264 MIN

What MIG Is: Hardware Partitioning Explained, and What It Does and Does Not Guarantee

Jun 28, 20263 MIN

What the GPU Device Plugin Does: Architecture and Where the Security Model Breaks Down

Jun 28, 20263 MIN

How Kubernetes GPU Scheduling Works: Device Plugins, Resource Requests, and Where It Breaks

Jun 28, 20263 MIN

What the GPU Operator Is: Kubernetes-Native GPU Management and Its Attack Surface

Jun 28, 20263 MIN

What OCI Hooks Are: And Why They Became a Recurring GPU Vulnerability Class

Jun 28, 20263 MIN

How GPU Containers Differ from CPU Containers: The Five Layers and What Traditional Tools Miss

Jun 28, 20263 MIN

What the NVIDIA Container Toolkit Is: The Component in 100% of GPU Containers

Jun 28, 20263 MIN

What a Container Is at the Kernel Level: Namespaces, Cgroups, and Why GPU Containers Break the Model

Jun 28, 20263 MIN

What GPU Drivers Actually Do: Why They Are Large, Privileged, and Hard to Audit

Jun 28, 20263 MIN

How the CUDA Execution Model Works: Kernels, Contexts, and What Runs Where

Jun 28, 20263 MIN

What CUDA Is: The Programming Model Running Every AI Workload and Its Security Surface

Jun 28, 20263 MIN

How GPU Memory Works: VRAM, Shared Memory, and Where Isolation Assumptions Break

Jun 28, 20263 MIN

What Is a GPU -- and Why It Is Architecturally Different from a CPU

Jun 28, 20264 MIN