{"id":"W4410742664","doi":"10.1007/978-3-031-91524-6_9","title":"Defense Methods for Adversarial Attacks and Privacy Issues in Secure AI","year":2025,"lang":"en","type":"book-chapter","venue":"Progress in IS","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":false,"ca_institutions":"National Research Council Canada; McGill University; MacEwan University; York University; University of Toronto","funders":"","keywords":"Adversarial system; Computer security; Internet privacy; Computer science; Artificial intelligence","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001978014,0.001190451,0.0009426501,0.001053225,0.0009549027,0.003397899,0.001533492,0.002023181,0.009162148],"category_scores_gemma":[0.005330595,0.0006128848,0.0008378996,0.001401697,0.005039156,0.006437584,0.001957666,0.007785213,0.002295483],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00192174,"about_ca_system_score_gemma":0.0007732069,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0006124857,"about_ca_topic_score_gemma":0.0004435337,"domain_scores_codex":[0.9985039,0.000528654,0.000052604,0.0002021454,0.0006151124,0.00009752507],"domain_scores_gemma":[0.9960874,0.002902613,0.0001149005,0.0006229768,0.0002139089,0.00005819663],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"not_applicable","study_design_scores_codex":[0.00000992182,0.00001434515,0.0000334639,0.0000790102,0.000009947154,0.00001715966,0.00007148291,0.007496501,0.0004054976,0.9478387,0.00909433,0.03492962],"study_design_scores_gemma":[0.00000442581,0.0000128601,0.00005005661,0.00005584836,0.000006328946,0.00005642085,0.0000271806,0.04083362,0.0005461273,0.9299495,0.02844767,0.000009942246],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"other","genre_scores_codex":[0.002980161,0.01627243,0.8590336,0.007399126,0.00102524,0.00005845721,0.0000944127,0.0003898175,0.1127467],"genre_scores_gemma":[0.3881442,0.03514669,0.3633056,0.002991809,0.005792095,0.0004740147,0.0003618159,0.0007422987,0.2030415],"genre_candidate":"other","genre_consensus":null,"teacher_disagreement_score":0.009162148,"threshold_uncertainty_score":0.0306505,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02185277545631965,"score_gpt":0.3854299382630978,"score_spread":0.3635771628067782,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}