As the practicality of Artificial Intelligence (AI) and Machine Learning (ML) based techniques grow, there is an ever increasing threat of adversarial attacks. There is a need to red team this ecosystem to identify system vulnerabilities, potential threats, characterize properties that will enhance system robustness, and encourage the creation of effective defenses. A secondary need is to share this AI security threat intelligence between different stakeholders like, model developers, users, and AI/ML security professionals. In this paper, we create and describe a prototype system CTI4AI, to overcome the need to methodically identify and share AI/ML specific vulnerabilities and threat intelligence.
翻译:随着人工智能(AI)和机器学习(ML)技术的实用性不断增长,对抗性攻击的威胁与日俱增,有必要对这一生态系统进行重组,以查明系统脆弱性、潜在威胁、特征特征,从而增强系统稳健性,并鼓励建立有效的防御系统。次要需要是在不同的利益攸关方,如模型开发者、用户和AI/ML安全专业人员之间分享这种AI安全威胁情报。本文创建并描述一个原型系统CTI4AI,以克服有条不紊地识别和分享AI/ML具体脆弱性和威胁情报的需要。