DYNAMIC DEFENSES AND THE TRANSFERABILITY OF ADVERSARIAL EXAMPLES

Adversarial machine learning has been an important area of study for the securing of machine learning systems. However, for every defense that is made to protect these artificial learners, a more sophisticated attack emerges to defeat it. This has created an arms race, with the problem of adversarial attacks never being fully mitigated. This thesis examines the field of adversarial machine learning; specifically, the property of transferability, and the use of dynamic defenses as a solution to attacks which leverage it. We show that this is an emerging field of research, which may be the solution to one of the most intractable problems in adversarial machine learning. We go on to implement a minimal experiment, demonstrating that research within this area is easily accessible. Finally, we address some of the hurdles to overcome in order to unify the disparate aspects of current related research.

Department dc:contributor.department

Computer Science

Grantor dc:publisher

East Carolina University

Year dc:date.issued

2019

Author dc:creator

• Thomas, Sam

Advisor dc:contributor.advisor

• Tabrizi, M. H. N

• adversarial machine learning
• transferability

Language dc:language.iso

en

Handle dc:identifier.uri

http://hdl.handle.net/10342/7284

OAI identifier oai:identifier

oai:thescholarship.ecu.edu:10342/7284