arrow
返回

Security Evaluation of Pattern Classifiers under Attack

delete2014-04-01
delete282
delete
OA
AI
B
Battista Biggio *
G
Giorgio Fumera
F
Fabio Roli
DOI:10.1109/TKDE.2013.57delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Pattern classification systems are commonly used in adversarial applications, like biometric authentication, network intrusion detection, and spam filtering, in which data can be purposely manipulated by humans to undermine their operation. As this adversarial scenario is not taken into account by classical design methods, pattern classification systems may exhibit vulnerabilities, whose exploitation may severely affect their performance, and consequently limit their practical utility. Extending pattern classification theory and design methods to adversarial settings is thus a novel and very relevant research direction, which has not yet been pursued in a systematic way. In this paper, we address one of the main open issues: evaluating at design phase the security of pattern classifiers, namely, the performance degradation under potential attacks they may incur during operation. We propose a framework for empirical evaluation of classifier security that formalizes and generalizes the main ideas proposed in the literature, and give examples of its use in three real applications. Reported results show that security evaluation can provide a more complete understanding of the classifier's behavior in adversarial environments, and lead to better design choices.
Keyword:
Pattern classification
adversarial classification
performance evaluation
security evaluation
robustness evaluation

期刊

IEEE Transactions on Knowledge and Data Engineering 封面图
IEEE Transactions on Knowledge and Data Engineering
IF:
10.4
论文数:
6.8K
被引数:
3.2W

机构

U
university of cagliari
学者数:
1.2W
论文数: 9.7K
被引数: 9
引用论文

引用论文

err分享
err收藏
err2003-01-01
err0
PREAI
errO. N. Temkin; L. G. Bruk
err分享
err收藏
Do you see what I see? Mobile eye-tracker contextual analysis and inter-rater reliability
err2017-07-15
err0
errOAAI
errS. Stuart; D. Hunt; J. Nell; A. Godfrey; J. M. Hausdorff; L. Rochester; L. Alcock
err分享
err收藏
M Pathway and Areas 44 and 45 Are Involved in Stereoscopic Recognition Based on Binocular Disparity.
err2002-01-01
err0
errOAAI
errTsuneo Negawa; Shinji Mizuno; Tomoya Hahashi; Hiromi Kuwata; Mihoko Tomida; Hiroaki Hoshi; Seiichi Era; Kazuo Kuwata
err分享
err收藏
Backtracking
err1997-12-01
err0
errOAAI
errChris Welty; Lou Hoebel
err分享
err收藏
Gas hydrate destabilization: enhanced dewatering, benthic material turnover and large methane plumes at the Cascadia convergent margin
err1999-06-01
err0
PREAI
errE. Suess; M.E. Torres; G. Bohrmann; R.W. Collier; J. Greinert; P. Linke; G. Rehder; A. Trehu; K. Wallmann; G. Winckler; E. Zuleger
err分享
err收藏
Plasmapheresis for refractory status epilepticus, part I: A scoping systematic review of the adult literature
err2016-12-01
err0
PREAI
errF.A. Zeiler; M. Matuszczak; J. Teitelbaum; C.J. Kazina; L.M. Gillman
err分享
err收藏
学者 查看更多内容