David J. Miller, Zhen Xiang, George Kesidis

Adversarial Learning and Secure AI (eBook, PDF)

• Format: PDF

Produktbeschreibung

Providing a logical framework for student learning, this is the first textbook on adversarial learning. It introduces vulnerabilities of deep learning, then demonstrates methods for defending against attacks and making AI generally more robust. To help students connect theory with practice, it explains and evaluates attack-and-defense scenarios alongside real-world examples. Feasible, hands-on student projects, which increase in difficulty throughout the book, give students practical experience and help to improve their Python and PyTorch skills. Book chapters conclude with questions that can be used for classroom discussions. In addition to deep neural networks, students will also learn about logistic regression, naive Bayes classifiers, and support vector machines. Written for senior undergraduate and first-year graduate courses, the book offers a window into research methods and current challenges. Online resources include lecture slides and image files for instructors, and software for early course projects for students.

---

Dieser Download kann aus rechtlichen Gründen nur mit Rechnungsadresse in A, B, BG, CY, CZ, D, DK, EW, E, FIN, F, GR, HR, H, IRL, I, LT, L, LR, M, NL, PL, P, R, S, SLO, SK ausgeliefert werden.

Produktdetails

• Verlag: Cambridge University Press
• Erscheinungstermin: 31. August 2023
• Englisch
• ISBN-13: 9781009315654
• Artikelnr.: 68994250

Autorenporträt

David J. Miller is Professor of Electrical Engineering at the Pennsylvania State University.

Inhaltsangabe

Contents
Preface
Notation
1. Overview of adversarial learning
2. Deep learning background
3. Basics of detection and mixture models
4. Test-time evasion attacks (adversarial inputs)
5. Backdoors and before/during training defenses
6. Post-training reverse-engineering defense (PT-RED) Against Imperceptible Backdoors
7. Post-training reverse-engineering defense (PT-RED) against patch-incorporated backdoors
8. Transfer post-training reverse-engineering defense (T-PT-RED) against backdoors
9. Universal post-training backdoor defenses
10. Test-time detection of backdoor triggers
11. Backdoors for 3D point cloud (PC) classifiers
12. Robust deep regression and active learning
13. Error generic data poisoning defense
14. Reverse-engineering attacks (REAs) on classifiers
Appendix. Support Vector Machines (SVMs)
References
Index.