Qayyum Adnan, Ijaz Aneeqa, Usama Muhammad, Iqbal Waleed, Qadir Junaid, Elkhatib Yehia, Al-Fuqaha Ala
Information Technology University (ITU), Lahore, Pakistan.
AI4Networks Research Center, University of Oklahoma, Norman, OK, United States.
Front Big Data. 2020 Nov 12;3:587139. doi: 10.3389/fdata.2020.587139. eCollection 2020.
With the advances in machine learning (ML) and deep learning (DL) techniques, and the potency of cloud computing in offering services efficiently and cost-effectively, Machine Learning as a Service (MLaaS) cloud platforms have become popular. In addition, there is increasing adoption of third-party cloud services for outsourcing training of DL models, which requires substantial costly computational resources (e.g., high-performance graphics processing units (GPUs)). Such widespread usage of cloud-hosted ML/DL services opens a wide range of attack surfaces for adversaries to exploit the ML/DL system to achieve malicious goals. In this article, we conduct a systematic evaluation of literature of cloud-hosted ML/DL models along both the important dimensions- and -related to their security. Our systematic review identified a total of 31 related articles out of which 19 focused on attack, six focused on defense, and six focused on both attack and defense. Our evaluation reveals that there is an increasing interest from the research community on the perspective of attacking and defending different attacks on Machine Learning as a Service platforms. In addition, we identify the limitations and pitfalls of the analyzed articles and highlight open research issues that require further investigation.
随着机器学习(ML)和深度学习(DL)技术的进步,以及云计算在高效且经济高效地提供服务方面的效能,机器学习即服务(MLaaS)云平台已变得流行起来。此外,越来越多的第三方云服务被用于深度学习模型训练的外包,这需要大量昂贵的计算资源(例如,高性能图形处理单元(GPU))。这种云托管的机器学习/深度学习服务的广泛使用为对手利用机器学习/深度学习系统实现恶意目标提供了广泛的攻击面。在本文中,我们沿着与云托管的机器学习/深度学习模型安全性相关的重要维度对相关文献进行了系统评估。我们的系统综述共识别出31篇相关文章,其中19篇聚焦于攻击,6篇聚焦于防御,6篇既聚焦于攻击又聚焦于防御。我们的评估表明,研究界对从攻击和防御机器学习即服务平台上的不同攻击的角度的兴趣与日俱增。此外,我们确定了所分析文章的局限性和缺陷,并突出了需要进一步研究的开放研究问题。