000			01972nam a22001577a 4500
082			_a629.8
100			_aKhalid, Rashad _9122739
245			_aRandom Filter-Switching-based Defense Against Decision-based Adversarial Attacks on Machine Learning / _cRashad Khalid
264			_aIslamabad : _bSMME- NUST; _c2022.
300			_a69p. _bSoft Copy _c30cm
500			_aIn the AI and machine learning research field, adversarial machine learning(AML), a technique that tries to deceive models using erroneous data, is becoming a major concern. By exploiting the inherent vulnerability of ML models’ data reliance, AML can be used to generate adversarial attacks. Researches have shown that a small perturbation in input image can create disastrous results for an autonomous car system e.g. miscalssifying stop sign as speed limit sign near school. To counter these adversarial attacks, several defense mechanisms have been proposed. Some of the most prominent defenses are adversarial training, pre-processing-based defenses, Generative Adversarial Networkbased defenses. However, most of these defenses are either computationally expensive or become in-effective under the white-box threat model or against the decision-based attacks (Adversarial attacks that exploit the final decision of the attack under black-box settings). Therefore, there is a dire need to develop efficient defense mechanisms that can effectively counter the attacks while maintaining the classification accuracy. In this thesis, we propose to develop a computationally efficient and effective defense mechanism that effectively counters the score-based and decision-based adversarial attack under black-box settings while maintaining the classification accuracy on clean images.
650			_aMS Robotics and Intelligent Machine Engineering _9119486
700			_aSupervisor : Dr. Muhammad jawad khan _9119689
856			_uhttp://10.250.8.41:8080/xmlui/handle/123456789/30556
942			_2ddc _cTHE
999			_c609186 _d609186