arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1906.03466cs.AIcs.CRcs.CV
收藏

构建AI安全性的策略:保护AI不受攻击者攻击的防御

Strategies to architect AI Safety: Defense to guard AI from Adversaries

Rajagopal. A, Nirmala. V

摘要:

人工智能安全设计的影响对人工智能时代的人类至关重要。随着人类越来越依赖人工智能,尽管存在对抗攻击,但仍需要可靠工作的神经网络。安全可靠的人工智能普及应用的愿景是可以实现的。为了实现人工智能的安全性,本文探讨了策略和一种新的深度学习架构。为了保护AI免受对手的攻击,本文探讨了3种策略的组合:1。在推理时引入随机性,以隐藏对手的表示学习。2.通过分析推理序列来检测对手的存在。3.利用视觉相似性。为了实现这些策略,本文设计了一种新的体系结构,动态神经防御,DND。这种防御有3个深度学习架构特征:1.通过使用随机计算图隐藏神经网络从探索性攻击中学习的方式,DND逃避攻击。2.通过LSTM分析云AI推理引擎的输入序列,DND检测攻击序列。3.通过VAE生成的视觉相似输入进行推断,任何由DND方法保护的AI都不会屈服于黑客。因此,提出了开发可靠,安全和安全AI的路线图。

英文摘要:

The impact of designing for security of AI is critical for humanity in the AI era. With humans increasingly becoming dependent upon AI, there is a need for neural networks that work reliably, inspite of Adversarial attacks. The vision for Safe and secure AI for popular use is achievable. To achieve safety of AI, this paper explores strategies and a novel deep learning architecture. To guard AI from adversaries, paper explores combination of 3 strategies: 1. Introduce randomness at inference time to hide the representation learning from adversaries. 2. Detect presence of adversaries by analyzing the sequence of inferences. 3. Exploit visual similarity. To realize these strategies, this paper designs a novel architecture, Dynamic Neural Defense, DND. This defense has 3 deep learning architectural features: 1. By hiding the way a neural network learns from exploratory attacks using a random computation graph, DND evades attack. 2. By analyzing input sequence to cloud AI inference engine with LSTM, DND detects attack sequence. 3. By inferring with visual similar inputs generated by VAE, any AI defended by DND approach does not succumb to hackers. Thus, a roadmap to develop reliable, safe and secure AI is presented.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑