Guaranteeing AI Robustness against Deception (GARD)
Abstract
The Guaranteeing AI Robustness against Deception (GARD) program is developing techniques to defend against deception and other adversarial attacks on machine learning (ML) and artificial intelligence (AI) systems. GARD addresses the need to defend against deception attacks, whereby an adversary inputs engineered data into an ML system intending to cause the system to produce erroneous results. Deception attacks can enable adversaries to take control of autonomous systems, alter conclusions of ML-based decision support applications, and compromise tools and systems that rely on ML and AI technologies. Current techniques for defending ML and AI have proven brittle due to a focus on individual attack methods and weak methods for testing and evaluation. The GARD program is developing techniques that address the current limitations of defenses and produce ML and AI systems suitable for use in adversarial environments. The GARD program is also developing theory regarding potential fundamental limits on achievable ML robustness.
Document Details
- Document Type
- Accomplishment
- Publication Date
- Oct 01, 2023
- Source ID
- adb236f9905ffd90864ddcf6801c68aa