Pattern recognition systems under attack: design issues and research challenges
BIGGIO, BATTISTA;FUMERA, GIORGIO;ROLI, FABIO
2014-01-01
Abstract
We analyze the problem of designing pattern recognition systems in adversarial settings, under an engineering viewpoint, motivated by their increasing exploitation in security-sensitive applications like spam and malware detection, despite their vulnerability to potential attacks has not yet been deeply understood. We ̄rst review previous work and report examples of how a complex system may be evaded either by leveraging on trivial vulnerabilities of its untrained components, e.g. parsing errors in the pre-processing steps, or by exploiting more subtle vul- nerabilities of learning algorithms. We then discuss the need of exploiting both reactive and proactive security paradigms complementarily to improve the security by design. Our ultimate goal is to provide some useful guidelines for improving the security of pattern recognition in adversarial settings, and to suggest related open issues to foster research in this area.File | Dimensione | Formato | |
---|---|---|---|
biggio14-ijprai.pdf Solo gestori archivio
Tipologia: versione editoriale
Dimensione 624.81 kB
Formato Adobe PDF
|
624.81 kB | Adobe PDF | Visualizza/Apri Richiedi una copia |
I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.