Attacks, Defenses and Testing for Deep Learning (Record no. 60496)
[ view plain ]
| 000 -LEADER | |
|---|---|
| fixed length control field | 05708nam a22005655i 4500 |
| 001 - CONTROL NUMBER | |
| control field | 978-981-97-0425-5 |
| 003 - CONTROL NUMBER IDENTIFIER | |
| control field | DE-He213 |
| 005 - DATE AND TIME OF LATEST TRANSACTION | |
| control field | 20251030112256.0 |
| 007 - PHYSICAL DESCRIPTION FIXED FIELD--GENERAL INFORMATION | |
| fixed length control field | cr nn 008mamaa |
| 008 - FIXED-LENGTH DATA ELEMENTS--GENERAL INFORMATION | |
| fixed length control field | 240603s2024 si | s |||| 0|eng d |
| 020 ## - INTERNATIONAL STANDARD BOOK NUMBER | |
| International Standard Book Number | 9789819704255 |
| -- | 978-981-97-0425-5 |
| 024 7# - OTHER STANDARD IDENTIFIER | |
| Standard number or code | 10.1007/978-981-97-0425-5 |
| Source of number or code | doi |
| 050 #4 - LIBRARY OF CONGRESS CALL NUMBER | |
| Classification number | Q334-342 |
| 050 #4 - LIBRARY OF CONGRESS CALL NUMBER | |
| Classification number | TA347.A78 |
| 072 #7 - SUBJECT CATEGORY CODE | |
| Subject category code | UYQ |
| Source | bicssc |
| 072 #7 - SUBJECT CATEGORY CODE | |
| Subject category code | COM004000 |
| Source | bisacsh |
| 072 #7 - SUBJECT CATEGORY CODE | |
| Subject category code | UYQ |
| Source | thema |
| 100 1# - MAIN ENTRY--PERSONAL NAME | |
| Personal name | Chen, Jinyin. |
| Relator term | author. |
| Relator code | aut |
| -- | http://id.loc.gov/vocabulary/relators/aut |
| 9 (RLIN) | 78204 |
| 245 10 - TITLE STATEMENT | |
| Title | Attacks, Defenses and Testing for Deep Learning |
| Medium | [electronic resource] / |
| Statement of responsibility, etc. | by Jinyin Chen, Ximin Zhang, Haibin Zheng. |
| 250 ## - EDITION STATEMENT | |
| Edition statement | 1st ed. 2024. |
| 264 #1 - PRODUCTION, PUBLICATION, DISTRIBUTION, MANUFACTURE, AND COPYRIGHT NOTICE | |
| Place of production, publication, distribution, manufacture | Singapore : |
| Name of producer, publisher, distributor, manufacturer | Springer Nature Singapore : |
| -- | Imprint: Springer, |
| Date of production, publication, distribution, manufacture, or copyright notice | 2024. |
| 300 ## - PHYSICAL DESCRIPTION | |
| Extent | XX, 399 p. 128 illus., 126 illus. in color. |
| Other physical details | online resource. |
| 336 ## - CONTENT TYPE | |
| Content type term | text |
| Content type code | txt |
| Source | rdacontent |
| 337 ## - MEDIA TYPE | |
| Media type term | computer |
| Media type code | c |
| Source | rdamedia |
| 338 ## - CARRIER TYPE | |
| Carrier type term | online resource |
| Carrier type code | cr |
| Source | rdacarrier |
| 347 ## - DIGITAL FILE CHARACTERISTICS | |
| File type | text file |
| Encoding format | |
| Source | rda |
| 505 0# - FORMATTED CONTENTS NOTE | |
| Formatted contents note | Perturbation Optimized Black-Box Adversarial Attacks via Genetic Algorithm -- Feature Transfer Based Stealthy Poisoning Attack for DNNs -- Adversarial Attacks on GNN Based Vertical Federated Learning -- A Novel DNN Object Contour Attack on Image Recognition -- Query-Efficient Adversarial Attack Against Vertical Federated Graph Learning -- Targeted Label Adversarial Attack on Graph Embedding -- Backdoor Attack on Dynamic Link Prediction -- Attention Mechanism based Adversarial Attack against DRL -- Characterizing Adversarial Examples via Local Gradient Checking -- A Novel Adversarial Defense by Refocusing on Critical Areas -- Neuron-level Inverse Perturbation Against Adversarial Attacks -- Adaptive Channel Transformation-based Detector for Adversarial Attacks -- Defense Against Free-rider Attack From the Weight Evolving Frequency -- An Effective Model Copyright Protection for Federated Learning -- Guard the vertical federated graph learning from Property Inference Attack -- Using Adversarial Examples to Against Backdoor Attack in FL -- Evaluating the Adversarial Robustness of Deep Model by Decision Boundaries -- Certifiable Prioritization for Deep Neural Networks via Movement Cost in Feature Space -- Interpretable White-Box Fairness Testing through Biased Neuron Identification -- A Deep Learning Framework for Dynamic Network Link Prediction. . |
| 520 ## - SUMMARY, ETC. | |
| Summary, etc. | This book provides a systematic study on the security of deep learning. With its powerful learning ability, deep learning is widely used in CV, FL, GNN, RL, and other scenarios. However, during the process of application, researchers have revealed that deep learning is vulnerable to malicious attacks, which will lead to unpredictable consequences. Take autonomous driving as an example, there were more than 12 serious autonomous driving accidents in the world in 2018, including Uber, Tesla and other high technological enterprises. Drawing on the reviewed literature, we need to discover vulnerabilities in deep learning through attacks, reinforce its defense, and test model performance to ensure its robustness. Attacks can be divided into adversarial attacks and poisoning attacks. Adversarial attacks occur during the model testing phase, where the attacker obtains adversarial examples by adding small perturbations. Poisoning attacks occur during the model training phase, where the attacker injects poisoned examples into the training dataset, embedding a backdoor trigger in the trained deep learning model. An effective defense method is an important guarantee for the application of deep learning. The existing defense methods are divided into three types, including the data modification defense method, model modification defense method, and network add-on method. The data modification defense method performs adversarial defense by fine-tuning the input data. The model modification defense method adjusts the model framework to achieve the effect of defending against attacks. The network add-on method prevents the adversarial examples by training the adversarial example detector. Testing deep neural networks is an effective method to measure the security and robustness of deep learning models. Through test evaluation, security vulnerabilities and weaknesses in deep neural networks can be identified. By identifying and fixing these vulnerabilities, the security and robustness of the model can be improved. Our audience includes researchers in the field of deep learning security, as well as software development engineers specializing in deep learning. |
| 650 #0 - SUBJECT ADDED ENTRY--TOPICAL TERM | |
| Topical term or geographic name as entry element | |
| 9 (RLIN) | 58441 |
| 650 #0 - SUBJECT ADDED ENTRY--TOPICAL TERM | |
| Topical term or geographic name as entry element | |
| 650 #0 - SUBJECT ADDED ENTRY--TOPICAL TERM | |
| Topical term or geographic name as entry element | |
| 9 (RLIN) | 60157 |
| 650 #0 - SUBJECT ADDED ENTRY--TOPICAL TERM | |
| Topical term or geographic name as entry element | |
| 9 (RLIN) | 64231 |
| 650 14 - SUBJECT ADDED ENTRY--TOPICAL TERM | |
| Topical term or geographic name as entry element | |
| 9 (RLIN) | 58441 |
| 650 24 - SUBJECT ADDED ENTRY--TOPICAL TERM | |
| Topical term or geographic name as entry element | |
| 650 24 - SUBJECT ADDED ENTRY--TOPICAL TERM | |
| Topical term or geographic name as entry element | |
| 9 (RLIN) | 65860 |
| 700 1# - ADDED ENTRY--PERSONAL NAME | |
| Personal name | Zhang, Ximin. |
| Relator term | author. |
| Relator code | aut |
| -- | http://id.loc.gov/vocabulary/relators/aut |
| 9 (RLIN) | 78205 |
| 700 1# - ADDED ENTRY--PERSONAL NAME | |
| Personal name | Zheng, Haibin. |
| Relator term | author. |
| Relator code | aut |
| -- | http://id.loc.gov/vocabulary/relators/aut |
| 9 (RLIN) | 78206 |
| 710 2# - ADDED ENTRY--CORPORATE NAME | |
| Corporate name or jurisdiction name as entry element | SpringerLink (Online service) |
| 773 0# - HOST ITEM ENTRY | |
| Title | Springer Nature eBook |
| 776 08 - ADDITIONAL PHYSICAL FORM ENTRY | |
| Relationship information | Printed edition: |
| International Standard Book Number | 9789819704248 |
| 776 08 - ADDITIONAL PHYSICAL FORM ENTRY | |
| Relationship information | Printed edition: |
| International Standard Book Number | 9789819704262 |
| 776 08 - ADDITIONAL PHYSICAL FORM ENTRY | |
| Relationship information | Printed edition: |
| International Standard Book Number | 9789819704279 |
| 856 40 - ELECTRONIC LOCATION AND ACCESS | |
| Uniform Resource Identifier | <a href="https://doi.org/10.1007/978-981-97-0425-5">https://doi.org/10.1007/978-981-97-0425-5</a> |
| 912 ## - | |
| -- | ZDB-2-SCS |
| 912 ## - | |
| -- | ZDB-2-SXCS |
No items available.