Timezone: »

Learner Knowledge Levels in Adversarial Machine Learning
Sihui Dai · Prateek Mittal

Fri Jul 22 11:10 AM -- 11:15 AM (PDT) @

For adversarial robustness in a practical setting, it is important to consider realistic levels of knowledge that the learner has about the adversary's choice in perturbations. We present two levels of learner knowledge, (1) full knowledge which contains the majority of current research in adversarial ML and (2) partial knowledge which captures a more realistic setting where the learner does not know how to mathematically model the true perturbation function used by the adversary. We discuss current literature within each category and propose potential research directions within the setting of partial knowledge.

Author Information

Sihui Dai (Princeton University)
Prateek Mittal (Princeton University)

More from the Same Authors