MISLEAD: Manipulating Importance of Selected features for Learning Epsilon in Evasion Attack Deception
Fuente:
arXiv
Saved in:
| Main Authors: | , , , |
|---|---|
| Format: | Preprint |
| Published: |
2024
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866910431159779328 |
|---|---|
| author | Khazanchi, Vidit Kulkarni, Pavan Govindarajulu, Yuvaraj Parmar, Manojkumar |
| author_facet | Khazanchi, Vidit Kulkarni, Pavan Govindarajulu, Yuvaraj Parmar, Manojkumar |
| contents | Emerging vulnerabilities in machine learning (ML) models due to adversarial attacks raise concerns about their reliability. Specifically, evasion attacks manipulate models by introducing precise perturbations to input data, causing erroneous predictions. To address this, we propose a methodology combining SHapley Additive exPlanations (SHAP) for feature importance analysis with an innovative Optimal Epsilon technique for conducting evasion attacks. Our approach begins with SHAP-based analysis to understand model vulnerabilities, crucial for devising targeted evasion strategies. The Optimal Epsilon technique, employing a Binary Search algorithm, efficiently determines the minimum epsilon needed for successful evasion. Evaluation across diverse machine learning architectures demonstrates the technique's precision in generating adversarial samples, underscoring its efficacy in manipulating model outcomes. This study emphasizes the critical importance of continuous assessment and monitoring to identify and mitigate potential security risks in machine learning systems. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2404_15656 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | MISLEAD: Manipulating Importance of Selected features for Learning Epsilon in Evasion Attack Deception Khazanchi, Vidit Kulkarni, Pavan Govindarajulu, Yuvaraj Parmar, Manojkumar Machine Learning Cryptography and Security Emerging vulnerabilities in machine learning (ML) models due to adversarial attacks raise concerns about their reliability. Specifically, evasion attacks manipulate models by introducing precise perturbations to input data, causing erroneous predictions. To address this, we propose a methodology combining SHapley Additive exPlanations (SHAP) for feature importance analysis with an innovative Optimal Epsilon technique for conducting evasion attacks. Our approach begins with SHAP-based analysis to understand model vulnerabilities, crucial for devising targeted evasion strategies. The Optimal Epsilon technique, employing a Binary Search algorithm, efficiently determines the minimum epsilon needed for successful evasion. Evaluation across diverse machine learning architectures demonstrates the technique's precision in generating adversarial samples, underscoring its efficacy in manipulating model outcomes. This study emphasizes the critical importance of continuous assessment and monitoring to identify and mitigate potential security risks in machine learning systems. |
| title | MISLEAD: Manipulating Importance of Selected features for Learning Epsilon in Evasion Attack Deception |
| topic | Machine Learning Cryptography and Security |
| url | https://arxiv.org/abs/2404.15656 |