Machine learning security assessment method based on adversary and attack methods

Hugo Sebastian Pacheco-Rodríguez, Eleazar Aguirre-Anaya, Ricardo Menchaca-Méndez, Manel Medina-Llinàs

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

Analytical methods for assessing the security of Machine Learning Systems (MLS) that have been proposed in other researches do not provide compatibility with each other and their taxonomies have become incomplete due to the introduction of new properties of adversarial machine learning. In this sense, we have identified carefully relevant concepts of most prevalent researches about the security assessment of MLS. We propose a novel security assessment method based on the modeling of the adversary and the selection of adversarial attack methods for the generation of adversarial examples related to the also proposed taxonomy. This method provides compatibility with other proposed methods as well as practical guidelines and tools for evaluating machine learning systems. We also introduce the concern for efficient metrics capable of measuring the robustness of MLS to adversarial examples. This research is focused on the empirical evaluation of the security of machine learning systems, rather than on classical performance evaluation.

Original languageEnglish
Title of host publicationTelematics and Computing - 9th International Congress, WITCOM 2020, Proceedings
EditorsMiguel Félix Mata-Rivera, Roberto Zagal-Flores, Cristian Barria-Huidobro
PublisherSpringer Science and Business Media Deutschland GmbH
Pages377-389
Number of pages13
ISBN (Print)9783030625535
DOIs
StatePublished - 2020
Event9th International Congress on Telematics and Computing, WITCOM 2020 - Puerto Vallarta, Mexico
Duration: 2 Nov 20206 Nov 2020

Publication series

NameCommunications in Computer and Information Science
Volume1280
ISSN (Print)1865-0929
ISSN (Electronic)1865-0937

Conference

Conference9th International Congress on Telematics and Computing, WITCOM 2020
Country/TerritoryMexico
CityPuerto Vallarta
Period2/11/206/11/20

Keywords

  • Evaluation
  • Machine learning
  • Security

Fingerprint

Dive into the research topics of 'Machine learning security assessment method based on adversary and attack methods'. Together they form a unique fingerprint.

Cite this