title: Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¼ÐµÑÐ¾Ð´Ð° Ð·Ð°ÑÐ¸ÑÑ Ð¾Ñ Ð°ÑÐ°Ðº ÑÐºÐ»Ð¾Ð½ÐµÐ½Ð¸Ñ Ð² ÑÐ¸ÑÑÐµÐ¼Ð°Ñ Ð¼Ð°ÑÐ¸Ð½Ð½Ð¾Ð³Ð¾ Ð¾Ð±ÑÑÐµÐ½Ð¸Ñ
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° Ð±Ð°ÐºÐ°Ð»Ð°Ð²ÑÐ°
titleType: Subtitle
title: Development of a method for detecting evasion attacks on machine learning systems
Creators: name: ÐÐ²Ð°Ð½Ð¾Ð²Ð°, ÐÐ»ÑÐ³Ð°
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2022
Subjects: ÑÐ¸ÑÑÐµÐ¼Ñ Ð¼Ð°ÑÐ¸Ð½Ð½Ð¾Ð³Ð¾ Ð¾Ð±ÑÑÐµÐ½Ð¸Ñ
Ð°ÑÐ°ÐºÐ¸ ÑÐºÐ»Ð¾Ð½ÐµÐ½Ð¸Ñ
ÑÐ¾ÑÑÑÐ·Ð°ÑÐµÐ»ÑÐ½ÑÐµ Ð¿ÑÐ¸Ð¼ÐµÑÑ
Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ðµ Ð°ÑÐ°Ðº
machine learning systems
evasion attack
adversial examples
attack detection

description: Ð¢ÐµÐ¼Ð° Ð²ÑÐ¿ÑÑÐºÐ½Ð¾Ð¹ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ ÑÐ°Ð±Ð¾ÑÑ: Â«Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¼ÐµÑÐ¾Ð´Ð° Ð·Ð°ÑÐ¸ÑÑ Ð¾Ñ Ð°ÑÐ°Ðº ÑÐºÐ»Ð¾Ð½ÐµÐ½Ð¸Ñ Ð² ÑÐ¸ÑÑÐµÐ¼Ð°Ñ Ð¼Ð°ÑÐ¸Ð½Ð½Ð¾Ð³Ð¾ Ð¾Ð±ÑÑÐµÐ½Ð¸ÑÂ». Ð¦ÐµÐ»ÑÑ ÑÐ°Ð±Ð¾ÑÑ ÑÐ²Ð»ÑÐµÑÑÑ Ð¸Ð·ÑÑÐµÐ½Ð¸Ðµ ÑÑÑÐµÑÑÐ²ÑÑÑÐ¸Ñ Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ñ Ð°ÑÐ°Ðº ÑÐºÐ»Ð¾Ð½ÐµÐ½Ð¸Ñ, ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¼ÐµÑÐ¾Ð´Ð°, ÐºÐ¾ÑÐ¾ÑÑÐ¹ Ð¿Ð¾Ð·Ð²Ð¾Ð»Ð¸Ð» Ð±Ñ ÑÐ»ÑÑÑÐ¸ÑÑ Ð¿ÑÐµÐ´ÑÐ´ÑÑÐ¸Ðµ Ð¼ÐµÑÐ¾Ð´Ñ. ÐÑÐµÐ´Ð¼ÐµÑÐ¾Ð¼ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÐ²Ð»ÑÑÑÑÑ Ð°ÑÐ°ÐºÐ¸ ÑÐºÐ»Ð¾Ð½ÐµÐ½Ð¸Ñ Ð½Ð° ÑÐ¸ÑÑÐµÐ¼Ñ Ð¼Ð°ÑÐ¸Ð½Ð½Ð¾Ð³Ð¾ Ð¾Ð±ÑÑÐµÐ½Ð¸Ñ Ð¸ Ð¼ÐµÑÐ¾Ð´Ñ Ð¸Ñ Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ñ. ÐÐ°Ð´Ð°ÑÐ¸, ÑÐµÑÐ°ÐµÐ¼ÑÐµ Ð² ÑÐ¾Ð´Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ:1. ÐÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ðµ Ð°ÑÐ°Ðº ÑÐºÐ»Ð¾Ð½ÐµÐ½Ð¸Ñ.2. Ð ÐµÐ°Ð»Ð¸Ð·Ð°ÑÐ¸Ñ Ð°ÑÐ°Ðº ÑÐºÐ»Ð¾Ð½ÐµÐ½Ð¸Ñ Ð½Ð° ÑÐ¸ÑÑÐµÐ¼Ñ Ð¼Ð°ÑÐ¸Ð½Ð½Ð¾Ð³Ð¾ Ð¾Ð±ÑÑÐµÐ½Ð¸Ñ.3. Ð ÐµÐ°Ð»Ð¸Ð·Ð°ÑÐ¸Ñ Ð¸ Ð°Ð½Ð°Ð»Ð¸Ð· Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ñ Ð°ÑÐ°Ðº ÑÐºÐ»Ð¾Ð½ÐµÐ½Ð¸Ñ.4. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¼ÐµÑÐ¾Ð´Ð°, Ð¼Ð¸Ð½Ð¸Ð¼Ð¸Ð·Ð¸ÑÑÑÑÐµÐ³Ð¾ Ð½ÐµÐ´Ð¾ÑÑÐ°ÑÐºÐ¸ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð½ÑÑ Ð¼ÐµÑÐ¾Ð´Ð¾Ð².5. Ð¡ÑÐ°Ð²Ð½ÐµÐ½Ð¸Ðµ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð½ÑÑ Ð¼ÐµÑÐ¾Ð´Ð¾Ð².Ð ÑÐ¾Ð´Ðµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð¸ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ñ Ð°ÑÐ°ÐºÐ¸ Ð½Ð° ÑÐ¸ÑÑÐµÐ¼Ñ Ð¼Ð°ÑÐ¸Ð½Ð½Ð¾Ð³Ð¾ Ð¾Ð±ÑÑÐµÐ½Ð¸Ñ, Ð²Ð¸Ð´Ñ Ð°ÑÐ°Ðº ÑÐºÐ»Ð¾Ð½ÐµÐ½Ð¸Ñ, Ð¼ÐµÑÐ¾Ð´Ñ Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ñ Ð´Ð°Ð½Ð½ÑÑ Ð²Ð½Ðµ ÑÐ°ÑÐ¿ÑÐµÐ´ÐµÐ»ÐµÐ½Ð¸Ñ Ð¸ Ð°ÑÐ°Ðº Ð² ÑÐ¸ÑÑÐµÐ¼Ð°Ñ Ð¼Ð°ÑÐ¸Ð½Ð½Ð¾Ð³Ð¾ Ð¾Ð±ÑÑÐµÐ½Ð¸Ñ, ÑÐµÐ°Ð»Ð¸Ð·Ð¾Ð²Ð°Ð½Ñ Ð¼ÐµÑÐ¾Ð´Ñ Ð¸ Ð¿ÑÐ¾Ð²ÐµÐ´ÐµÐ½Ñ Ð°ÑÐ°ÐºÐ¸ ÑÐºÐ»Ð¾Ð½ÐµÐ½Ð¸Ñ Ñ ÑÐµÐ»ÑÑ Ð¿ÑÐ¾Ð²ÐµÑÐºÐ¸ ÑÑÑÐµÐºÑÐ¸Ð²Ð½Ð¾ÑÑÐ¸ ÑÑÐ¸Ñ Ð¼ÐµÑÐ¾Ð´Ð¾Ð².Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð¸ Ð¼Ð¾Ð´Ð¸ÑÐ¸ÑÐ¸ÑÐ¾Ð²Ð°Ð½Ñ Ð¼ÐµÑÐ¾Ð´Ñ Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ñ Ð°ÑÐ°Ðº ÑÐºÐ»Ð¾Ð½ÐµÐ½Ð¸Ñ Ð¸ Ð²ÑÑÐ²Ð»ÐµÐ½Ñ Ð½ÐµÐ´Ð¾ÑÑÐ°ÑÐºÐ¸ Ð¸ Ð¿ÑÐµÐ¸Ð¼ÑÑÐµÑÑÐ²Ð° ÑÐµÐ°Ð»Ð¸Ð·Ð¾Ð²Ð°Ð½Ð½ÑÑ Ð¼ÐµÑÐ¾Ð´Ð¾Ð².ÐÐ¾Ð»ÑÑÐµÐ½Ð½ÑÐµ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÑ Ð¼Ð¾Ð³ÑÑ Ð±ÑÑÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ñ Ð² Ð´Ð°Ð»ÑÐ½ÐµÐ¹ÑÐ¸Ñ ÑÐµÐ°Ð»Ð¸Ð·Ð°ÑÐ¸ÑÑ Ð¸ Ð¼Ð¾Ð´Ð¸ÑÐ¸ÐºÐ°ÑÐ¸ÑÑ Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ñ Ð°ÑÐ°Ðº.
description: The topic of the graduate qualification work is Â«Development of a method for detecting evasion attacks on machine learning systemsÂ». The purpose of the study is the analysis attack detection methods for detection evasion attacks and to develop a method that would reduce the shortcomings of previous methods. The research set the following goals:1. Study of evasion attacks.2. Implementation of evasion attacks on the machine learning system.3. Implementation and analysis of methods for detecting evasion attacks.4. Development of a method that minimizes the shortcomings of the studied methods.5. Comparison of the developed methods.In the course of the work, a study attacks on machine learning systems, types of evasion attacks, methods for detecting data out of distribution and attacks in machine learning. Methods were implemented and evasion attacks were carried out.As a result of the work, the methods for detecting evasion attacks were modified and the pros and cons of the implemented methods were identified. The results obtained can be used in further implementations and modifications of evasion attack detection methods.