Towards more Practical Threat Models in Artificial Intelligence Security

arXiv:2311.09994v2 Announce Type: replace
Abstract: Recent works have identified a gap between research and practice in artificial intelligence security: threats studied in academia do not always reflect the practical use and security risks of AI. For example, while models are often studied in isolation, they form part of larger ML pipelines in practice. Recent works also brought forward that adversarial manipulations introduced by academic attacks are impractical. We take a first step towards describing the full extent of this disparity. …

academia artificial artificial intelligence arxiv cs.ai cs.cr gap intelligence isolation pipelines practice research risks security security risks threat threat models threats