{"id":"W4206243656","doi":"10.1186/s13635-021-00125-2","title":"Secure machine learning against adversarial samples at test time","year":2022,"lang":"en","type":"article","venue":"EURASIP Journal on Information Security","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":13,"is_retracted":false,"has_abstract":true,"ca_institutions":"","funders":"U.S. Air Force; Canadian Institute for Advanced Research; National Science Foundation","keywords":"Computer science; Adversarial system; Artificial intelligence; Machine learning; Deep neural networks; Test set; Robustness (evolution); Scalability; Classifier (UML); Gradient descent; Deep learning; Adversarial machine learning; Attack model; Artificial neural network; Computer security","routes":{"ca_aff":false,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":true},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow","sts","research_integrity","insufficient_payload"],"consensus_categories":[],"category_scores_codex":[0.001971421,0.0002868412,0.0002955959,0.000435576,0.002765157,0.0005006277,0.001356408,0.00007715675,0.001005644],"category_scores_gemma":[0.001275937,0.0002832793,0.0001649778,0.0006265885,0.00004462897,0.003191436,0.001265812,0.002457015,0.0005843124],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.000670917,"about_ca_system_score_gemma":0.0001569258,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00001057568,"about_ca_topic_score_gemma":0.000001459904,"domain_scores_codex":[0.9965195,0.0005898696,0.0007816405,0.000243521,0.001400488,0.0004649595],"domain_scores_gemma":[0.9976333,0.0005951557,0.0009780312,0.000380725,0.0001802183,0.0002326097],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0005111406,0.0002424697,0.007133503,0.00004610567,0.0001208423,0.0001862335,0.02304774,0.8933365,0.0004793757,0.02491743,0.02394855,0.02603006],"study_design_scores_gemma":[0.001786281,0.0005358698,0.001491159,0.000020646,0.00001172985,0.0005925503,0.0002598693,0.5181385,0.0001455047,0.0006535743,0.4759055,0.0004588226],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.3884464,0.0002881057,0.5024968,0.0218998,0.01215346,0.001629467,0.0004439082,0.002752867,0.06988922],"genre_scores_gemma":[0.9922383,0.00002779304,0.00406134,0.002772177,0.0003955227,0.00001190762,0.0001371948,0.00002118441,0.0003345089],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.603792,"threshold_uncertainty_score":0.9999619,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.008340035973071574,"score_gpt":0.2230166545099525,"score_spread":0.2146766185368809,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}