Adversarial Transferability in Wearable Sensor Systems

Abstract

Machine learning is used for inference and decision making in wearable sensor systems. However, recent studies have found that machine learning algorithms are easily fooled by the addition of adversarial perturbations to their inputs. What is more interesting is that adversarial examples generated for one machine learning system is also effective against other systems. This property of adversarial examples is called transferability. In this work, we take the first stride in studying adversarial transferability in wearable sensor systems from the following perspectives: 1) transferability between machine learning systems, 2) transferability across subjects, 3) transferability across sensor body locations, and 4) transferability across datasets. We found strong untargeted transferability in most cases. Targeted attacks were less successful with success scores from $0\%$ to $80\%$. The transferability of adversarial examples depends on many factors such as the inclusion of data from all subjects, sensor body position, number of samples in the dataset, type of learning algorithm, and the distribution of source and target system dataset. The transferability of adversarial examples decreases sharply when the data distribution of the source and target system becomes more distinct. We also provide guidelines for the community for designing robust sensor systems.

arXiv comment31 pages

References in corpus (11)

• Scikit-learn: Machine Learning in Python
• Explaining and Harnessing Adversarial Examples
• Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples
• Ensembles of Deep LSTM Learners for Activity Recognition using Wearables
• Adversarial Attacks and Defences: A Survey
• Technical Report on the CleverHans v2.1.0 Adversarial Examples Library
• Black-box Adversarial Attacks with Limited Queries and Information
• Cross-Domain Transferability of Adversarial Perturbations
• Robustness for Non-Parametric Classification: A Generic Attack and Defense
• Transferability of Adversarial Examples to Attack Cloud-based Image Classifier Service
• Real-Time Adversarial Attacks

Cited by in corpus (1)

• Who's Afraid of Adversarial Transferability?