<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Publishing DTD v1.3 20210610//EN" "https://jats.nlm.nih.gov/publishing/1.3/JATS-journalpublishing1-3.dtd">
<article article-type="research-article" dtd-version="1.3" xml:lang="ru">
  <front xmlns:xlink="http://www.w3.org/1999/xlink">
    <journal-meta>
      <journal-id journal-id-type="elibrary">9004</journal-id>
      <journal-title-group>
        <journal-title>Problems of information security. Computer systems</journal-title>
        <trans-title-group xml:lang="ru">
          <trans-title>Проблемы информационной безопасности. Компьютерные системы</trans-title>
        </trans-title-group>
      </journal-title-group>
      <issn pub-type="epub">2071-8217</issn>
    </journal-meta>
    <article-meta xmlns:xlink="http://www.w3.org/1999/xlink">
      <article-id pub-id-type="publisher-id">12</article-id>
      <article-id pub-id-type="doi">10.48612/jisp/nrmx-ah3v-d373</article-id>
      <title-group>
        <article-title>The hybrid method for evasion attacks detection in the machine learning systems</article-title>
        <trans-title-group xml:lang="ru">
          <trans-title>Гибридный метод выявления атак уклонения, направленных на системы машинного обучения</trans-title>
        </trans-title-group>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <name>
            <surname>Ivanova</surname>
            <given-names>Olga</given-names>
          </name>
          <xref ref-type="aff" rid="aff1"/>
          <email>ivanova.od@spbstu.ru</email>
        </contrib>
        <contrib contrib-type="author">
          <contrib-id contrib-id-type="orcid">0000-0002-9732-0099</contrib-id>
          <name>
            <surname>Kalinin</surname>
            <given-names>Maxim</given-names>
          </name>
          <xref ref-type="aff" rid="aff1"/>
          <email>max@ibks.spbstu.ru</email>
        </contrib>
      </contrib-group>
      <aff id="aff1">Peter the Great St. Petersburg Polytechnic University</aff>
      <pub-date publication-format="electronic" date-type="pub" iso-8601-date="2023-03-19">
        <day>19</day>
        <month>03</month>
        <year>2023</year>
      </pub-date>
      <issue>1</issue>
      <fpage>104</fpage>
      <lpage>110</lpage>
      <self-uri xmlns:xlink="http://www.w3.org/1999/xlink" content-type="pdf" xlink:href="https://jisp.spbstu.ru/userfiles/files/2023_1.pdf"/>
      <abstract xml:lang="en">
        <p>An analysis of existing methods that provide the detection of evasion attacks in the machine learning systems is presented. An experimental comparison of these methods has been performed. The Uncertainty method is the most universal one, but its accuracy in detecting SGM, MS, BA evasion attacks is lower than that of other methods, and it is difficult to determine such values of the uncertainty boundary for adversarial samples that would allow more accurate detection of evasions. A new hybrid method has been proposed and discussed, which is a two-stage verification of input data, supplemented by input data pre-processing. In the proposed method, the threshold of uncertainty for adversarial samples has become distinct and quickly computable. The hybrid method allows detecting OOD attacks with 80 % accuracy, and SGM, MS, BA attacks with 93 % accuracy</p>
      </abstract>
      <kwd-group xml:lang="en">
        <kwd>evasion attacks</kwd>
        <kwd>evasion attack detection</kwd>
        <kwd>hybrid method</kwd>
        <kwd>machine learning</kwd>
        <kwd>adversarial samples</kwd>
        <kwd>ODIN</kwd>
        <kwd>Uncertainty</kwd>
      </kwd-group>
    </article-meta>
  </front>
</article>
