Modelling Data Poisoning Attacks Against Convolutional Neural Networks

Annapurna Jonnalagadda (), Debdeep Mohanty, Ashraf Zakee () and Firuz Kamalov ()
Additional contact information
Annapurna Jonnalagadda: School of Computer Science and Engineering, VIT University, Vellore 632 014, India
Debdeep Mohanty: School of Computer Science and Engineering, VIT University, Vellore 632 014, India
Ashraf Zakee: School of Computer Science and Engineering, VIT University, Vellore 632 014, India
Firuz Kamalov: ��Department of Electrical Engineering, Canadian University Dubai, Dubai, United Arab Emirates

Journal of Information & Knowledge Management (JIKM), 2024, vol. 23, issue 02, 1-21

Abstract: Cybersecurity has become a great concern in many real-world applications involving adversaries with Machine Learning (ML) algorithms being more widely used. This concern is more challenging in Internet of Things (IoT) platforms. As IoT-enabled applications are growing at a rapid pace in every sector there are growing security related incidents as well. ML algorithms are widely deployed to perform data analysis, reasoning and decision-making over the data emanating from IoT devices. Security of this data while collection, communication and computing is a major challenge. Various attackers are trying to find weaknesses in the ML algorithms and trying to deceive these ML algorithms to learn the wrong information from the data. Countermeasures need to be developed to evaluate the security of the ML models. To develop such countermeasures, one needs to understand all possible attacks on the ML models. Data poisoning attacks are a class of adversarial attacks on ML where an adversary has the power to alter a small fraction of the training data in order to make the trained classifier to satisfy certain objectives. In order to develop an attack-resistant ML model, one needs to know all possible attacks on these models. The recent data poisoning technique such as the Fast Gradient Sign Method (FGSM) is static and provides very micro control to the attacker on creating adversarial data. In this research, we develop a more robust data poisoning technique for deep neural networks using Generative Adversarial Networks (GANs) to create a data poisoning attack. We then evaluate the performance of the proposed algorithm and also compare the results obtained by FGSM.

Keywords: Convolutional neural networks; cybersecurity; data poisoning attack; generative adversarial networks (search for similar items in EconPapers)
Date: 2024
References: Add references at CitEc
Citations:

Downloads: (external link)
http://www.worldscientific.com/doi/abs/10.1142/S0219649224500229
Access to full text is restricted to subscribers

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:wsi:jikmxx:v:23:y:2024:i:02:n:s0219649224500229

Ordering information: This journal article can be ordered from

DOI: 10.1142/S0219649224500229

Access Statistics for this article

Journal of Information & Knowledge Management (JIKM) is currently edited by Professor Suliman Hawamdeh

More articles in Journal of Information & Knowledge Management (JIKM) from World Scientific Publishing Co. Pte. Ltd.
Bibliographic data for series maintained by Tai Tone Lim ().