Security Matters: A Survey on Adversarial Machine Learning

Abstract

Adversarial machine learning is a fast growing research area, which considers the scenarios when machine learning systems may face potential adversarial attackers, who intentionally synthesize input data to make a well-trained model to make mistake. It always involves a defending side, usually a classifier, and an attacking side that aims to cause incorrect output. The earliest studies on the adversarial examples for machine learning algorithms start from the information security area, which considers a much wider varieties of attacking methods. But recent research focus that popularized by the deep learning community places strong emphasis on how the "imperceivable" perturbations on the normal inputs may cause dramatic mistakes by the deep learning with supposed super-human accuracy. This paper serves to give a comprehensive introduction to a range of aspects of the adversarial deep learning topic, including its foundations, typical attacking and defending strategies, and some extended studies.

References in corpus (13)

• Distilling the Knowledge in a Neural Network
• Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples
• Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples
• Poisoning Attacks against Support Vector Machines
• Towards Deep Neural Network Architectures Robust to Adversarial Examples
• Understanding Neural Networks through Representation Erasure
• Generating Natural Adversarial Examples
• Technical Report on the CleverHans v2.1.0 Adversarial Examples Library
• Adversarial Perturbations Against Deep Neural Networks for Malware Classification
• Defensive Distillation is Not Robust to Adversarial Examples
• MagNet and "Efficient Defenses Against Adversarial Attacks" are Not Robust to Adversarial Examples
• Tactics of Adversarial Attack on Deep Reinforcement Learning Agents
• Task-Aware Compressed Sensing with Generative Adversarial Networks

Cited by in corpus (4)

• Adversarial Machine Learning in Wireless Communications using RF Data: A Review
• Security and Privacy for Artificial Intelligence: Opportunities and Challenges
• Adversarial Security Attacks and Perturbations on Machine Learning and Deep Learning Methods
• What Clinical Trials Can Teach Us about the Development of More Resilient AI for Cybersecurity