{"id":174203,"date":"2023-11-27T19:47:13","date_gmt":"2023-11-27T18:47:13","guid":{"rendered":"https:\/\/datascientest.com\/en\/?p=174203"},"modified":"2023-11-27T19:57:14","modified_gmt":"2023-11-27T18:57:14","slug":"adversarial-attack-definition-and-protection-against-this-threat","status":"publish","type":"post","link":"https:\/\/datascientest.com\/en\/adversarial-attack-definition-and-protection-against-this-threat","title":{"rendered":"Adversarial Attack: Definition and protection against this threat"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"174203\" class=\"elementor elementor-174203\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-94fd642 e-flex e-con-boxed e-con\" data-id=\"94fd642\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9becee0 elementor-widget elementor-widget-heading\" data-id=\"9becee0\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h2 class=\"elementor-heading-title elementor-size-default\">An Adversarial Attack involves the manipulation or exploitation of a Machine Learning model using carefully crafted data. Explore the comprehensive insights into this concerning phenomenon that poses a significant challenge to the field of Artificial Intelligence.<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-948d2ac e-flex e-con-boxed e-con\" data-id=\"948d2ac\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-14e0082 elementor-widget elementor-widget-heading\" data-id=\"14e0082\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">What is the purpose of an Adversarial Attack?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e2e366e elementor-widget elementor-widget-text-editor\" data-id=\"e2e366e\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p>An <strong>Adversarial Attack<\/strong> often aims to disrupt a Machine Learning model. By <a href=\"https:\/\/datascientest.com\/en\/adversarial-training-what-you-didnt-know-yet\">training a model on inaccurate or intentionally falsified data,<\/a> it is possible to negatively impact its future performance.<\/p><p>Similarly, an already trained model can be corrupted by data. Even systems that have already been commercialized can be vulnerable to these attacks.<\/p><p>For <a href=\"https:\/\/datascientest.com\/en\/adversarial-examples-definition-and-importance-in-machine-learning\">example, simply placing a few stickers on the road can trick a self-driving car into taking the wrong lane<\/a> and driving in the opposite direction. Similarly, subtle changes can deceive a medical analysis system into classifying a benign tumor as malignant.<\/p><p>A computer vision system can confuse a stop sign with a speed limit sign if a piece of tape is attached to it. <a href=\"https:\/\/datascientest.com\/en\/ai-and-creativity-exploring-the-myth-vs-reality\">Artificial Intelligence<\/a> is, therefore, very easy to deceive at the moment.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-8dad2a7 e-flex e-con-boxed e-con\" data-id=\"8dad2a7\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e043b10 elementor-widget elementor-widget-heading\" data-id=\"e043b10\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">The different types of Adversarial Attacks<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5445bcd elementor-widget elementor-widget-text-editor\" data-id=\"5445bcd\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>There are<strong> three main categories of adversarial attacks.<\/strong><\/p><p>The first type is an attack aimed at influencing a classifier by disrupting the model to <strong>alter its predictions.<\/strong><\/p><p>The second type involves breaching the model&#8217;s security to inject malicious data that will be classified as legitimate. Finally, a <a href=\"https:\/\/datascientest.com\/en\/cybersecurity-the-ultimate-guide\">targeted attack involves carrying out a specific intrusion or disruption<\/a>, or creating general chaos.<\/p><p>These different categories can be further subdivided based on their operation into &#8220;black box&#8221; or &#8220;white box.&#8221; In the case of a white-box attack, the attacker has access to the model&#8217;s parameters. This is not the case in a black-box attack.<\/p><p><strong>Evasion attacks<\/strong> are the most common. They involve modifying data to evade detection systems or to be classified as legitimate. These attacks do not involve influencing the data used to train the model.<\/p><p>For example, this could involve malware or spam hidden in an <strong>email attachment image to evade detection by email spam filters<\/strong>. Similarly, it is possible to deceive a biometric verification system.<\/p><p><a href=\"https:\/\/datascientest.com\/en\/data-poisoning-a-threat-to-machine-learning-models\">Another type of attack is &#8220;Data Poisoning.<\/a>&#8221; This method involves contaminating the data used to continue training a Machine Learning model. By injecting samples into the data, the process is disrupted, and the model is altered.<\/p><p>Model theft or model extraction involves reconstructing a model or extracting the data on which it was trained. The consequences can be severe if the training data or model are sensitive and confidential.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0b23285 e-flex e-con-boxed e-con\" data-id=\"0b23285\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4de3030 elementor-widget elementor-widget-heading\" data-id=\"4de3030\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Some examples of adversarial attacks<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c3ba06c elementor-widget elementor-widget-text-editor\" data-id=\"c3ba06c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><strong>Artificial Intelligence<\/strong> is a relatively new technology, but there are already numerous Adversarial Attacks to be concerned about. A hacker managed to 3D print a turtle figurine with a texture that tricks Google&#8217;s object detection AI into classifying it as a rifle.<\/p><p>Another example is an image of a dog that has been modified to look like a cat, <strong>both for humans and computers.<\/strong><\/p><p>Concerning facial recognition systems, many individuals have created &#8220;adversarial patterns&#8221; for glasses and clothing capable of deceiving these AIs.<\/p><p>&#8220;Adversarial inputs&#8221; in audio can also disrupt intelligent assistants and prevent them from hearing voice commands.<\/p><p>In a study published in April 2021, researchers from Google and the University of California, Berkeley, demonstrated that even the most <strong>advanced forensic classifiers are vulnerable to adversarial attacks.<\/strong><\/p><p>These AIs have been trained to distinguish between real and synthetic content, especially to <a href=\"https:\/\/datascientest.com\/en\/google-solves-the-problem-of-generative-ai-and-fake-news\">combat Fake News or Deepfakes.<\/a><\/p><p>Unfortunately, Adversarial Attacks may hinder their ability to fulfill this role.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-29067f4 elementor-widget elementor-widget-image\" data-id=\"29067f4\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=\".svg\"]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block}<\/style>\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1520\" height=\"828\" src=\"https:\/\/datascientest.com\/en\/files\/2021\/12\/adversarial-attack-chatbot-scaled-e1639139334720.jpg\" class=\"attachment-full size-full wp-image-132922\" alt=\"adversarial-attack-chatbot\" srcset=\"https:\/\/datascientest.com\/en\/files\/2021\/12\/adversarial-attack-chatbot-scaled-e1639139334720.jpg 1520w, https:\/\/datascientest.com\/en\/files\/2021\/12\/adversarial-attack-chatbot-scaled-e1639139334720-300x163.jpg 300w, https:\/\/datascientest.com\/en\/files\/2021\/12\/adversarial-attack-chatbot-scaled-e1639139334720-1024x558.jpg 1024w, https:\/\/datascientest.com\/en\/files\/2021\/12\/adversarial-attack-chatbot-scaled-e1639139334720-768x418.jpg 768w\" sizes=\"(max-width: 1520px) 100vw, 1520px\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\"><\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0a6fcdc elementor-widget elementor-widget-text-editor\" data-id=\"0a6fcdc\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Another <a href=\"https:\/\/datascientest.com\/en\/autogpt-discover-the-new-tool-that-makes-chatgpt-autonomous\">well-known case is that of the chatbot<\/a> Tay, deployed on Twitter by Microsoft to learn how to hold conversations through interactions with other internet users. Unfortunately, trolls had fun feeding Tay with insults and offensive comments to make it uncontrollable. Sixteen hours after its launch, Microsoft was forced to deactivate its AI, which had become racist and homophobic.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0314a60 e-flex e-con-boxed e-con\" data-id=\"0314a60\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6861a68 elementor-widget elementor-widget-heading\" data-id=\"6861a68\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">How can you protect yourself against an Adversarial Attack?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6f03be8 elementor-widget elementor-widget-text-editor\" data-id=\"6f03be8\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Over the past few years, <strong>research on Adversarial Attacks<\/strong> has significantly expanded. In 2014, there were no studies on the subject on the Arxiv.org server. By 2020, there were more than 1100 studies on this platform.<\/p><p>However, according to the 2019 National Security Commission on Artificial Intelligence report, only a very small percentage of AI research is focused on defense against adversarial attacks.<\/p><p>Nevertheless, protective methods are developing, and this topic now holds a prominent place in prestigious conferences such as NeurIPS, ICLR, DEF CON, Black Hat, or Usenix.<\/p><p>Startups are emerging to combat this issue. For example, Resistant AI offers a product to strengthen <a href=\"https:\/\/datascientest.com\/en\/learn-ai-everything-you-need-to-know\">AI algorithms against attacks.<\/a><\/p><p>A good defense measure is to test the resilience of models with a Trojan Horse. In the context of Machine Learning, this type of attack involves modifying the model to produce incorrect responses.<\/p><p>To simplify these tests and allow companies to conduct them on a large scale, researchers from John Hopkins University have developed the <strong>TrojAI framework.<\/strong> This set of tools generates datasets and models that have already been tampered with by trojans.<\/p><p>As a result, researchers can conduct experiments and try to understand the effects of <a href=\"https:\/\/datascientest.com\/en\/datasets-top-5-places-to-find-quality-datasets\">various datasets on the models<\/a>. It becomes easier to test detection methods to better reinforce AI.<\/p><p>On the other hand, Google researchers have published a study describing a framework capable of detecting attacks. Various companies offer tools to generate adversarial examples to deceive models in frameworks like MxNet, Keras, <a href=\"https:\/\/datascientest.com\/en\/pytorch-all-about-this-framework\">Facebook PyTorch<\/a>, TensorFlow, or Caffe2.<\/p><p>These include Baidu Advbox, Microsoft Counterfit, IBM Adversarial Robustness Toolbox, or Salesforce Robustness Gym. MIT&#8217;s Artificial Intelligence Laboratory has also launched the TextFooler tool to<a href=\"https:\/\/datascientest.com\/en\/nlp-training-become-an-nlp-pro-and-master-the-art-of-natural-language-processing\"> enhance natural language processing (NLP) models.<\/a><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3a6daed elementor-align-center button-principale elementor-widget elementor-widget-button\" data-id=\"3a6daed\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm elementor-animation-grow\" href=\"https:\/\/datascientest.com\/en\/machine-learning-engineer-course\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-text\">Discover Machine Learning Engineer training<\/span>\n\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>An Adversarial Attack involves the manipulation or exploitation of a Machine Learning model using carefully crafted data. Explore the comprehensive insights into this concerning phenomenon that poses a significant challenge to the field of Artificial Intelligence. What is the purpose of an Adversarial Attack? An Adversarial Attack often aims to disrupt a Machine Learning model. [&hellip;]<\/p>\n","protected":false},"author":67,"featured_media":174208,"comment_status":"open","ping_status":"open","sticky":false,"template":"elementor_theme","format":"standard","meta":{"content-type":"","inline_featured_image":false},"categories":[2412],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.7 (Yoast SEO v21.7) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Adversarial Attack: Definition and protection against this threat<\/title>\n<meta name=\"description\" content=\"An adversarial attack, in the context of artificial intelligence and machine learning, refers to a deliberate and malicious attempt to manipulate or deceive a machine learning model by introducing ...\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/datascientest.com\/en\/adversarial-attack-definition-and-protection-against-this-threat\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Adversarial Attack: Definition and protection against this threat\" \/>\n<meta property=\"og:description\" content=\"An Adversarial Attack involves the manipulation or exploitation of a Machine Learning model using carefully crafted data. Explore the comprehensive\" \/>\n<meta property=\"og:url\" content=\"https:\/\/datascientest.com\/en\/adversarial-attack-definition-and-protection-against-this-threat\" \/>\n<meta property=\"og:site_name\" content=\"Data Science Courses | DataScientest\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/DataScientestEN\" \/>\n<meta property=\"article:published_time\" content=\"2023-11-27T18:47:13+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-11-27T18:57:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/datascientest.com\/en\/files\/2023\/11\/adversarial-attack.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"562\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Melanie\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DataScientest__\" \/>\n<meta name=\"twitter:site\" content=\"@DataScientest__\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Melanie\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/datascientest.com\/en\/adversarial-attack-definition-and-protection-against-this-threat#article\",\"isPartOf\":{\"@id\":\"https:\/\/datascientest.com\/en\/adversarial-attack-definition-and-protection-against-this-threat\"},\"author\":{\"name\":\"Melanie\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/person\/19d5f7ade9407eb69af3bf6d1ae1731d\"},\"headline\":\"Adversarial Attack: Definition and protection against this threat\",\"datePublished\":\"2023-11-27T18:47:13+00:00\",\"dateModified\":\"2023-11-27T18:57:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/datascientest.com\/en\/adversarial-attack-definition-and-protection-against-this-threat\"},\"wordCount\":935,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/datascientest.com\/en\/#organization\"},\"articleSection\":[\"Cloud &amp; Data Engineering\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/datascientest.com\/en\/adversarial-attack-definition-and-protection-against-this-threat#respond\"]}],\"copyrightYear\":\"2023\",\"copyrightHolder\":{\"@id\":\"https:\/\/datascientest.com\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/datascientest.com\/en\/adversarial-attack-definition-and-protection-against-this-threat\",\"url\":\"https:\/\/datascientest.com\/en\/adversarial-attack-definition-and-protection-against-this-threat\",\"name\":\"Adversarial Attack: Definition and protection against this threat\",\"isPartOf\":{\"@id\":\"https:\/\/datascientest.com\/en\/#website\"},\"datePublished\":\"2023-11-27T18:47:13+00:00\",\"dateModified\":\"2023-11-27T18:57:14+00:00\",\"description\":\"An adversarial attack, in the context of artificial intelligence and machine learning, refers to a deliberate and malicious attempt to manipulate or deceive a machine learning model by introducing ...\",\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/datascientest.com\/en\/adversarial-attack-definition-and-protection-against-this-threat\"]}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/datascientest.com\/en\/#website\",\"url\":\"https:\/\/datascientest.com\/en\/\",\"name\":\"Data Science Courses | DataScientest\",\"description\":\"Leader in Data Science Courses\",\"publisher\":{\"@id\":\"https:\/\/datascientest.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/datascientest.com\/en\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/datascientest.com\/en\/#organization\",\"name\":\"DataScientest\",\"url\":\"https:\/\/datascientest.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png\",\"contentUrl\":\"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png\",\"width\":301,\"height\":301,\"caption\":\"DataScientest\"},\"image\":{\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/DataScientestEN\",\"https:\/\/twitter.com\/DataScientest__\",\"https:\/\/www.linkedin.com\/school\/datascientest\/mycompany\/\",\"https:\/\/www.tiktok.com\/@datascientest\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/person\/19d5f7ade9407eb69af3bf6d1ae1731d\",\"name\":\"Melanie\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/8d3d660a0698de06f13ecf4823519da1?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/8d3d660a0698de06f13ecf4823519da1?s=96&d=mm&r=g\",\"caption\":\"Melanie\"},\"url\":\"https:\/\/datascientest.com\/en\/author\/melaniekrause\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Adversarial Attack: Definition and protection against this threat","description":"An adversarial attack, in the context of artificial intelligence and machine learning, refers to a deliberate and malicious attempt to manipulate or deceive a machine learning model by introducing ...","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/datascientest.com\/en\/adversarial-attack-definition-and-protection-against-this-threat","og_locale":"en_GB","og_type":"article","og_title":"Adversarial Attack: Definition and protection against this threat","og_description":"An Adversarial Attack involves the manipulation or exploitation of a Machine Learning model using carefully crafted data. Explore the comprehensive","og_url":"https:\/\/datascientest.com\/en\/adversarial-attack-definition-and-protection-against-this-threat","og_site_name":"Data Science Courses | DataScientest","article_publisher":"https:\/\/www.facebook.com\/DataScientestEN","article_published_time":"2023-11-27T18:47:13+00:00","article_modified_time":"2023-11-27T18:57:14+00:00","og_image":[{"width":1024,"height":562,"url":"https:\/\/datascientest.com\/en\/files\/2023\/11\/adversarial-attack.webp","type":"image\/webp"}],"author":"Melanie","twitter_card":"summary_large_image","twitter_creator":"@DataScientest__","twitter_site":"@DataScientest__","twitter_misc":{"Written by":"Melanie","Estimated reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/datascientest.com\/en\/adversarial-attack-definition-and-protection-against-this-threat#article","isPartOf":{"@id":"https:\/\/datascientest.com\/en\/adversarial-attack-definition-and-protection-against-this-threat"},"author":{"name":"Melanie","@id":"https:\/\/datascientest.com\/en\/#\/schema\/person\/19d5f7ade9407eb69af3bf6d1ae1731d"},"headline":"Adversarial Attack: Definition and protection against this threat","datePublished":"2023-11-27T18:47:13+00:00","dateModified":"2023-11-27T18:57:14+00:00","mainEntityOfPage":{"@id":"https:\/\/datascientest.com\/en\/adversarial-attack-definition-and-protection-against-this-threat"},"wordCount":935,"commentCount":0,"publisher":{"@id":"https:\/\/datascientest.com\/en\/#organization"},"articleSection":["Cloud &amp; Data Engineering"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/datascientest.com\/en\/adversarial-attack-definition-and-protection-against-this-threat#respond"]}],"copyrightYear":"2023","copyrightHolder":{"@id":"https:\/\/datascientest.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/datascientest.com\/en\/adversarial-attack-definition-and-protection-against-this-threat","url":"https:\/\/datascientest.com\/en\/adversarial-attack-definition-and-protection-against-this-threat","name":"Adversarial Attack: Definition and protection against this threat","isPartOf":{"@id":"https:\/\/datascientest.com\/en\/#website"},"datePublished":"2023-11-27T18:47:13+00:00","dateModified":"2023-11-27T18:57:14+00:00","description":"An adversarial attack, in the context of artificial intelligence and machine learning, refers to a deliberate and malicious attempt to manipulate or deceive a machine learning model by introducing ...","inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/datascientest.com\/en\/adversarial-attack-definition-and-protection-against-this-threat"]}]},{"@type":"WebSite","@id":"https:\/\/datascientest.com\/en\/#website","url":"https:\/\/datascientest.com\/en\/","name":"Data Science Courses | DataScientest","description":"Leader in Data Science Courses","publisher":{"@id":"https:\/\/datascientest.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/datascientest.com\/en\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/datascientest.com\/en\/#organization","name":"DataScientest","url":"https:\/\/datascientest.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png","contentUrl":"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png","width":301,"height":301,"caption":"DataScientest"},"image":{"@id":"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/DataScientestEN","https:\/\/twitter.com\/DataScientest__","https:\/\/www.linkedin.com\/school\/datascientest\/mycompany\/","https:\/\/www.tiktok.com\/@datascientest"]},{"@type":"Person","@id":"https:\/\/datascientest.com\/en\/#\/schema\/person\/19d5f7ade9407eb69af3bf6d1ae1731d","name":"Melanie","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/datascientest.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/8d3d660a0698de06f13ecf4823519da1?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8d3d660a0698de06f13ecf4823519da1?s=96&d=mm&r=g","caption":"Melanie"},"url":"https:\/\/datascientest.com\/en\/author\/melaniekrause"}]}},"_links":{"self":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/posts\/174203"}],"collection":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/users\/67"}],"replies":[{"embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/comments?post=174203"}],"version-history":[{"count":0,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/posts\/174203\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/media\/174208"}],"wp:attachment":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/media?parent=174203"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/categories?post=174203"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/tags?post=174203"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}