A cryptographic approach to black box adversarial machine learning

Authors: Kevin Shi, Daniel Hsu, Allison Bishop
Published: 2019-06-07 | Updated: 2020-02-21

Source: https://arxiv.org/abs/1906.03231

PDF: https://arxiv.org/pdf/1906.03231

AIにより推定されたラベル

敵対的訓練 防御効果分析 セキュリティテスト

※ こちらのラベルはAIによって自動的に追加されました。そのため、正確でないことがあります。
詳細は文献データベースについてをご覧ください。

Abstract

We propose a new randomized ensemble technique with a provable security guarantee against black-box transfer attacks. Our proof constructs a new security problem for random binary classifiers which is easier to empirically verify and a reduction from the security of this new model to the security of the ensemble classifier. We provide experimental evidence of the security of our random binary classifiers, as well as empirical results of the adversarial accuracy of the overall ensemble to black-box attacks. Our construction crucially leverages hidden randomness in the multiclass-to-binary reduction.