{"id":"W4410742664","doi":"10.1007/978-3-031-91524-6_9","title":"Defense Methods for Adversarial Attacks and Privacy Issues in Secure AI","year":2025,"lang":"en","type":"book-chapter","venue":"Progress in IS","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":false,"ca_institutions":"National Research Council Canada; McGill University; MacEwan University; York University; University of Toronto","funders":"","keywords":"Adversarial system; Computer security; Internet privacy; Computer science; Artificial intelligence","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.001126197,0.0004950308,0.0007748026,0.0005838572,0.0001056217,0.0002147672,0.001252524,0.0006275959,0.00003438086],"category_scores_gemma":[0.0003637333,0.0005176769,0.0001467448,0.0001761035,0.000184672,0.0003747361,0.001495633,0.001101781,0.000004593461],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001521934,"about_ca_system_score_gemma":0.0001916641,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00002526688,"about_ca_topic_score_gemma":0.00002084572,"domain_scores_codex":[0.9973806,0.0001686685,0.0005878739,0.001112458,0.0002760817,0.0004743409],"domain_scores_gemma":[0.9980488,0.0006710122,0.0002826287,0.0007954255,0.0001227508,0.00007941044],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"not_applicable","study_design_scores_codex":[0.00009769742,0.00003191251,0.002429366,0.0003987552,0.00007159171,0.00005963483,0.003457225,0.0001210059,4.441833e-7,0.3569323,0.00196338,0.6344367],"study_design_scores_gemma":[0.002098124,0.0001474132,0.0001747898,0.001239945,0.00006267281,0.00001202884,0.00001823893,0.1093107,0.00003878645,0.205851,0.6801158,0.0009304459],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.00003075392,0.02166794,0.9335045,0.007712333,0.002271022,0.002296767,0.00003008772,0.0002879719,0.03219867],"genre_scores_gemma":[0.001122897,0.0004180939,0.9575129,0.0006675329,0.0004127078,0.0001904913,0.00002218947,0.00007579342,0.03957737],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.6781524,"threshold_uncertainty_score":0.9997275,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02185277545631965,"score_gpt":0.3854299382630978,"score_spread":0.3635771628067782,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}