title: ÐÐ±ÐµÑÐ¿ÐµÑÐµÐ½Ð¸Ðµ ÐºÐ¾Ð½ÑÐ¸Ð´ÐµÐ½ÑÐ¸Ð°Ð»ÑÐ½Ð¾ÑÑÐ¸ Ð¿ÑÐ¸ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸Ð¸ ÑÐ¸ÑÑÐµÐ¼ Ð¼Ð°ÑÐ¸Ð½Ð½Ð¾Ð³Ð¾ Ð¾Ð±ÑÑÐµÐ½Ð¸Ñ
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° Ð¼Ð°Ð³Ð¸ÑÑÑÐ°
titleType: Subtitle
title: Ensuring confidentiality in the use of machine learning systems
Creators: name: Ð ÑÐ´Ð½Ð¸ÑÐºÐ°Ñ, ÐÐºÐ°ÑÐµÑÐ¸Ð½Ð°
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2023
Subjects: ÐÐ°ÑÐ¸Ð½Ð½Ð¾Ðµ Ð¾Ð±ÑÑÐµÐ½Ð¸Ðµ
ÐÐ½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ñ
Ð°ÑÐ°ÐºÐ° Ð¸Ð·Ð²Ð»ÐµÑÐµÐ½Ð¸Ñ Ð¼Ð¾Ð´ÐµÐ»Ð¸
model extraction attack

description: Ð¢ÐµÐ¼Ð° Ð²ÑÐ¿ÑÑÐºÐ½Ð¾Ð¹ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ ÑÐ°Ð±Ð¾ÑÑ: Â«ÐÐ±ÐµÑÐ¿ÐµÑÐµÐ½Ð¸Ðµ ÐºÐ¾Ð½ÑÐ¸Ð´ÐµÐ½ÑÐ¸Ð°Ð»ÑÐ½Ð¾ÑÑÐ¸ Ð¿ÑÐ¸ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸Ð¸ ÑÐ¸ÑÑÐµÐ¼ Ð¼Ð°ÑÐ¸Ð½Ð½Ð¾Ð³Ð¾ Ð¾Ð±ÑÑÐµÐ½Ð¸ÑÂ». Ð¦ÐµÐ»ÑÑ ÑÐ°Ð±Ð¾ÑÑ ÑÐ²Ð»ÑÐµÑÑÑ Ð¾Ð±ÐµÑÐ¿ÐµÑÐµÐ½Ð¸Ðµ ÐºÐ¾Ð½ÑÐ¸Ð´ÐµÐ½ÑÐ¸Ð°Ð»ÑÐ½Ð¾ÑÑÐ¸ Ð¿ÑÐ¾Ð¿ÑÐ¸ÐµÑÐ°ÑÐ½ÑÑ Ð¼Ð¾Ð´ÐµÐ»ÐµÐ¹ ÑÐ¸ÑÑÐµÐ¼ Ð¼Ð°ÑÐ¸Ð½Ð½Ð¾Ð³Ð¾ Ð¾Ð±ÑÑÐµÐ½Ð¸Ñ. ÐÑÐµÐ´Ð¼ÐµÑÐ¾Ð¼ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÐ²Ð»ÑÐµÑÑÑ ÐºÐ¾Ð½ÑÐ¸Ð´ÐµÐ½ÑÐ¸Ð°Ð»ÑÐ½Ð¾ÑÑÑ ÑÐ¸ÑÑÐµÐ¼ Ð¼Ð°ÑÐ¸Ð½Ð½Ð¾Ð³Ð¾ Ð¾Ð±ÑÑÐµÐ½Ð¸Ñ. ÐÐ°Ð´Ð°ÑÐ¸, ÑÐµÑÐ°ÐµÐ¼ÑÐµ Ð² ÑÐ¾Ð´Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ: 1. ÐÐ½Ð°Ð»Ð¸Ð· Ð¸ ÑÐ¸ÑÑÐµÐ¼Ð°ÑÐ¸Ð·Ð°ÑÐ¸Ñ Ð°ÑÐ°Ðº Ð½Ð° ÑÐ¸ÑÑÐµÐ¼Ñ Ð¼Ð°ÑÐ¸Ð½Ð½Ð¾Ð³Ð¾ Ð¾Ð±ÑÑÐµÐ½Ð¸Ñ. 2. ÐÐ½Ð°Ð»Ð¸Ð· Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð·Ð°ÑÐ¸ÑÑ Ð¾Ñ Ð°ÑÐ°Ðº, Ð½Ð°Ð¿ÑÐ°Ð²Ð»ÐµÐ½Ð½ÑÑ Ð½Ð° Ð½Ð°ÑÑÑÐµÐ½Ð¸Ðµ ÐºÐ¾Ð½ÑÐ¸Ð´ÐµÐ½ÑÐ¸Ð°Ð»ÑÐ½Ð¾ÑÑÐ¸ ÑÐ¸ÑÑÐµÐ¼ Ð¼Ð°ÑÐ¸Ð½Ð½Ð¾Ð³Ð¾ Ð¾Ð±ÑÑÐµÐ½Ð¸Ñ. 3. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð½Ð¾Ð²Ð¾Ð³Ð¾ ÑÐ¿Ð¾ÑÐ¾Ð±Ð° Ð·Ð°ÑÐ¸ÑÑ Ð¾Ñ Ð°ÑÐ°Ðº, Ð½Ð°Ð¿ÑÐ°Ð²Ð»ÐµÐ½Ð½ÑÑ Ð½Ð° Ð½Ð°ÑÑÑÐµÐ½Ð¸Ðµ ÐºÐ¾Ð½ÑÐ¸Ð´ÐµÐ½ÑÐ¸Ð°Ð»ÑÐ½Ð¾ÑÑÐ¸ ÑÐ¸ÑÑÐµÐ¼ Ð¼Ð°ÑÐ¸Ð½Ð½Ð¾Ð³Ð¾ Ð¾Ð±ÑÑÐµÐ½Ð¸Ñ. 4. Ð ÐµÐ°Ð»Ð¸Ð·Ð°ÑÐ¸Ñ Ð¿ÑÐµÐ´Ð»Ð¾Ð¶ÐµÐ½Ð½Ð¾Ð³Ð¾ ÑÐ¿Ð¾ÑÐ¾Ð±Ð° Ð·Ð°ÑÐ¸ÑÑ Ð¸ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ðµ Ð½Ð° ÑÐ¸ÑÑÐµÐ¼Ðµ Ð¼Ð°ÑÐ¸Ð½Ð½Ð¾Ð³Ð¾ Ð¾Ð±ÑÑÐµÐ½Ð¸Ñ. Ð ÑÐ¾Ð´Ðµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð° Ð¿ÑÐ¾Ð²ÐµÐ´ÐµÐ½Ð° ÑÐ¸ÑÑÐµÐ¼Ð°ÑÐ¸Ð·Ð°ÑÐ¸Ñ Ð°ÑÐ°Ðº Ð½Ð° ÑÐ¸ÑÑÐµÐ¼Ñ Ð¼Ð°ÑÐ¸Ð½Ð½Ð¾Ð³Ð¾ Ð¾Ð±ÑÑÐµÐ½Ð¸Ñ. ÐÑÐ¾Ð²ÐµÐ´ÐµÐ½ Ð°Ð½Ð°Ð»Ð¸Ð· Ð°ÑÐ°Ðº, Ð½Ð°Ð¿ÑÐ°Ð²Ð»ÐµÐ½Ð½ÑÑ Ð½Ð° Ð½Ð°ÑÑÑÐµÐ½Ð¸Ðµ ÐºÐ¾Ð½ÑÐ¸Ð´ÐµÐ½ÑÐ¸Ð°Ð»ÑÐ½Ð¾ÑÑÐ¸ Ð¼Ð¾Ð´ÐµÐ»ÐµÐ¹ ÑÐ¸ÑÑÐµÐ¼ Ð¼Ð°ÑÐ¸Ð½Ð½Ð¾Ð³Ð¾ Ð¾Ð±ÑÑÐµÐ½Ð¸Ñ, Ð° ÑÐ°ÐºÐ¶Ðµ ÑÐ¿Ð¾ÑÐ¾Ð±Ð¾Ð² Ð·Ð°ÑÐ¸ÑÑ Ð¾Ñ Ð´Ð°Ð½Ð½Ð¾Ð³Ð¾ ÑÐ¸Ð¿Ð° Ð°ÑÐ°Ðº, Ð² ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ ÑÐµÐ³Ð¾ Ð·Ð°Ð´Ð°ÑÐ° Ð·Ð°ÑÐ¸ÑÑ Ð¾Ñ ÑÐ°ÐºÐ¸Ñ Ð°ÑÐ°Ðº Ð¿Ð¾ÑÑÐ°Ð²Ð»ÐµÐ½Ð° ÐºÐ°Ðº Ð¿Ð¾Ð¸ÑÐº Ð°Ð½Ð¾Ð¼Ð°Ð»Ð¸Ð¹ Ð²Ð¾ Ð²ÑÐ¾Ð´Ð½ÑÑ Ð´Ð°Ð½Ð½ÑÑ. ÐÑÐµÐ´Ð»Ð¾Ð¶ÐµÐ½ ÑÐ¿Ð¾ÑÐ¾Ð± Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ñ Ð°Ð½Ð¾Ð¼Ð°Ð»Ð¸Ð¹ Ð²Ð¾ Ð²ÑÐ¾Ð´Ð½ÑÑ Ð´Ð°Ð½Ð½ÑÑ Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ ÑÑÐ°ÑÐ¸ÑÑÐ¸ÑÐµÑÐºÐ¸Ñ Ð´Ð°Ð½Ð½ÑÑ Ñ ÑÑÐµÑÐ¾Ð¼ Ð²Ð¾Ð·Ð¾Ð±Ð½Ð¾Ð²Ð»ÐµÐ½Ð¸Ñ Ð°ÑÐ°ÐºÐ¸ Ð¿Ð¾Ð´ Ð´ÑÑÐ³Ð¾Ð¹ ÑÑÐµÑÐ½Ð¾Ð¹ Ð·Ð°Ð¿Ð¸ÑÑÑ Ð·Ð»Ð¾ÑÐ¼ÑÑÐ»ÐµÐ½Ð½Ð¸ÐºÐ°. ÐÐ¾Ð»ÑÑÐµÐ½Ð½ÑÐµ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÑ Ð¼Ð¾Ð³ÑÑ Ð±ÑÑÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ñ Ð² ÐºÐ°ÑÐµÑÑÐ²Ðµ Ð¾ÑÐ½Ð¾Ð²Ñ Ð´Ð»Ñ Ð¿ÑÐ¾ÐµÐºÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ ÑÐ¸ÑÑÐµÐ¼ Ð·Ð°ÑÐ¸ÑÑ Ð¼Ð°ÑÐ¸Ð½Ð½Ð¾Ð³Ð¾ Ð¾Ð±ÑÑÐµÐ½Ð¸Ñ.
description: The theme of the final qualification work: Â«Ensuring confidentiality in the use of machine learning systemsÂ». The aim of the work is to ensure the confidentiality of proprietary models of machine learning systems. The subject of the study is the confidentiality of machine learning systems. Tasks to be solved in the course of the study: 1. Analysis and systematization of attacks on machine learning systems. 2. Analysis of methods of protection against attacks aimed at violating the confidentiality of machine learning systems. 3. Development of a new method of protection against attacks aimed at violating the confidentiality of machine learning systems. 4. Implementation of the proposed method of protection and testing on a machine learning system. In the course of the work, attacks on machine learning systems were systematized. The analysis of attacks aimed at violating the confidentiality of machine learning models, as well as methods of protection against this type of attack, is carried out, as a result of which the task of protecting against such attacks is set as a search for anomalies in the input data. A method for detecting anomalies in the input data based on statistical data is proposed, taking into account the resumption of the attack under another attacker account. The results obtained can be used as a basis for designing machine learning protection systems.