Evade Hard Multiple Classifier Systems

نویسندگان

  • Battista Biggio
  • Giorgio Fumera
  • Fabio Roli
چکیده

Multiple classifier systems are widely used in security applications like biometric personal authentication, spam filtering, and intrusion detection in computer networks. Several works experimentally showed their effectiveness in these tasks. However, their use in such applications is motivated only by intuitive and qualitative arguments. In this work we give a first possible formal explanation of why multiple classifier systems are harder to evade, and therefore more secure, than a system based on a single classifier. To this end, we exploit a theoretical framework recently proposed to model adversarial classification problems. A case study in spam filtering illustrates our theoretical findings.

برای دانلود رایگان متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

ثبت نام

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

منابع مشابه

Classifier Ensembles for Detecting Concept Change in Streaming

Multiple classifier systems are widely used in securityapplications like biometric personal authentication, spam filtering,and intrusion detection in computer networks. Several works exper-imentally showed their effectiveness in these tasks. However, theiruse in such applications is motivated only by intuitive and qualitativearguments. In this work we give a first possible f...

متن کامل

Workshop on Supervised and Unsupervised Ensemble Methods and their Applications

Multiple classifier systems are widely used in securityapplications like biometric personal authentication, spam filtering,and intrusion detection in computer networks. Several works exper-imentally showed their effectiveness in these tasks. However, theiruse in such applications is motivated only by intuitive and qualitativearguments. In this work we give a first possible f...

متن کامل

Adversarial Pattern Classification Using Multiple Classifiers and Randomisation

In many security applications a pattern recognition system faces an adversarial classification problem, in which an intelligent, adaptive adversary modifies patterns to evade the classifier. Several strategies have been recently proposed to make a classifier harder to evade, but they are based only on qualitative and intuitive arguments. In this work, we consider a strategy consisting in hiding...

متن کامل

One-and-a-Half-Class Multiple Classifier Systems for Secure Learning Against Evasion Attacks at Test Time

Pattern classifiers have been widely used in adversarial settings like spam and malware detection, although they have not been originally designed to cope with intelligent attackers that manipulate data at test time to evade detection. While a number of adversary-aware learning algorithms have been proposed, they are computationally demanding and aim to counter specific kinds of adversarial dat...

متن کامل

ذخیره در منابع من


  با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید

عنوان ژورنال:

دوره   شماره 

صفحات  -

تاریخ انتشار 2009