Artificial Intelligence Data and Model Safety: Risks, Attacks and Defenses offers a comprehensive overview of the evolution of AI and its security concerns. The book delves into how historical advancements in AI have both bolstered and complicated the issue of safeguarding data and models. By reflecting on the interplay between machine learning innovations and vulnerabilities, it sets the stage for readers to understand the critical importance of robust defenses in this era of digital and algorithmic reliance. In addition to contextualizing the historical trajectory of AI security, the book examines foundational elements of machine learning, emphasizing the mechanisms that contribute to, or mitigate, risks.
Readers are guided through case studies of real-world attacks, illustrating the practical implications of security weaknesses, while proposed defense strategies provide actionable insights for strengthening AI systems.
1. AI and AI Security: An Introduction
2. Machine Learning Basics
3. AI Security Basics
4. Data Security: Attacks
5. Data Security: Defenses
6. Model Security: Adversarial Attacks
7. Model Security: Adversarial Defenses
8. Model Security: Backdoor Attacks
9. Model Security: Backdoor Defenses
10. Model Security: Extraction Attack Defense
11. Future Prospects
Professor Yu-Gang Jiang is based at Fudan University, PR China. He is primarily engaged in scientific research in artificial intelligence, multimedia information processing, and secure and trustworthy machine learning. He has published over 100 papers in top international journals and conferences in these domains. In recent years, he has achieved multiple innovative results in artificial intelligence security, such as proposing the first black-box video adversarial sample generation method and the first data poisoning and backdoor attack methods for video recognition models. Dr Xingjun Ma is an associate professor in the School of Computer Science and Technology, Fudan University, PR China. He obtained his doctoral degree from The University of Melbourne in Australia in 2019. He has previously worked as a research fellow at The University of Melbourne and as a lecturer at Deakin University. His research focuses on trustworthy machine learning, specifically the security, robustness, interpretability, privacy, and fairness of machine learning data, algorithms, and models. He has published over 50 papers in top international conferences and journals and holds two international patents. Dr Zuxuan Wu is currently an assistant professor at the School of Computer Science and Technology, Fudan University, China. In 2020, he obtained his doctoral degree from the University of Maryland in the US. His main research interests include computer vision, deep learning, and multimedia content analysis. He has been awarded the AI 2000 Most Influential Scholars Award in 2022, and the Microsoft Research Ph.D. Fellowship in 2019, and the Snap Ph.D. Fellowship in 2017.
