{"id":"W4406460297","doi":"10.1109/tps-isa62245.2024.00032","title":"Noise as a Double-Edged Sword: Reinforcement Learning Exploits Randomized Defenses in Neural Networks","year":2024,"lang":"en","type":"article","venue":"","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":1,"is_retracted":false,"has_abstract":true,"ca_institutions":"Ontario Tech University","funders":"","keywords":"SWORD; Reinforcement learning; Exploit; Computer science; Noise (video); Artificial neural network; Artificial intelligence; Computer security; World Wide Web; Image (mathematics)","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.001623462,0.000305426,0.0005373522,0.0003569991,0.0001773135,0.000595607,0.000778706,0.0001166976,0.0001921385],"category_scores_gemma":[0.0003774484,0.000251497,0.0002182115,0.00098834,0.0000772049,0.0009844671,0.0006577094,0.0009679715,0.0001318594],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001072685,"about_ca_system_score_gemma":0.00008402671,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0003558062,"about_ca_topic_score_gemma":0.00002658143,"domain_scores_codex":[0.9972753,0.0004324804,0.0006057951,0.0006685277,0.0004307518,0.00058717],"domain_scores_gemma":[0.9982586,0.001036858,0.0001027583,0.0004201131,0.00005291143,0.0001287897],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.002221429,0.00001067119,0.0001427369,0.00001976155,0.00003263353,0.000146827,0.001248992,0.9197375,0.00001456666,0.06361531,0.000101474,0.01270816],"study_design_scores_gemma":[0.02825762,0.00004959911,0.00002041372,0.0001003612,0.00001709256,0.00002733493,0.00009057063,0.9697539,0.00004378017,0.0005830459,0.00076288,0.0002933983],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.01537762,0.0008054716,0.9638979,0.0009395053,0.001438396,0.0005886313,2.793303e-8,0.0009627132,0.0159897],"genre_scores_gemma":[0.9882653,0.00005839553,0.006961849,0.0003191486,0.000210911,0.0001125955,0.000004703166,0.0000324463,0.004034697],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9728876,"threshold_uncertainty_score":0.9999937,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01468093571233063,"score_gpt":0.2739371671525557,"score_spread":0.2592562314402251,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}