Manipulating hidden-Markov-model inferences by corrupting batch data

doi:10.1016/j.cor.2023.106478

Manipulating hidden-Markov-model inferences by corrupting batch data

2024-02-01

1

OA

AI

W

William N. Caballero *

DOI：10.1016/j.cor.2023.106478

Original

Save

View PDF

Abstract

En 中文

Time-series models typically assume untainted and legitimate streams of data. However, a self-interested adversary may have incentive to corrupt this data, thereby altering a decision maker's inference. Within the broader field of adversarial machine learning, this research provides a novel, probabilistic perspective toward the manipulation of hidden Markov model inferences via corrupted data. In particular, we provision a suite of corruption problems for filtering, smoothing, and decoding inferences leveraging an adversarial risk analysis approach. Multiple stochastic programming models are set forth that incorporate realistic uncertainties and varied attacker objectives. Three general solution methods are developed by alternatively viewing estimation from frequentist and Bayesian perspectives. The efficacy of each method is illustrated via extensive, empirical testing. The developed methods are characterized by their solution quality and computational effort, resulting in a stratification of techniques across varying problem-instance architectures. This research highlights the weaknesses of hidden Markov models under adversarial activity, thereby motivating the need for robustification techniques to ensure their security.

Keywords:

Adversarial risk analysis

Hidden Markov models

Adversarial machine learning

Manipulating hidden-Markov-model inferences by corrupting batch data

Abstract

AI Summary

Journal

Organization