<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Publishing DTD v1.3 20210610//EN" "https://jats.nlm.nih.gov/publishing/1.3/JATS-journalpublishing1-3.dtd">
<article article-type="research-article" dtd-version="1.3" xml:lang="en">
  <front xmlns:xlink="http://www.w3.org/1999/xlink">
    <journal-meta>
      <journal-id journal-id-type="elibrary">9004</journal-id>
      <journal-title-group>
        <journal-title>Problems of information security. Computer systems</journal-title>
        <trans-title-group xml:lang="ru">
          <trans-title>Проблемы информационной безопасности. Компьютерные системы</trans-title>
        </trans-title-group>
      </journal-title-group>
      <issn pub-type="epub">2071-8217</issn>
    </journal-meta>
    <article-meta xmlns:xlink="http://www.w3.org/1999/xlink">
      <article-id pub-id-type="publisher-id">14</article-id>
      <article-id pub-id-type="doi">10.48612/jisp/ad7f-mgh1-urdh</article-id>
      <title-group>
        <article-title>Ensuring the stability of online learning artificial intelligence systems based on model similarity assessment</article-title>
        <trans-title-group xml:lang="ru">
          <trans-title>Обеспечение устойчивости систем искусственного интеллекта с онлайн-обучением на основе оценки схожести моделей</trans-title>
        </trans-title-group>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <name>
            <surname>Tsibulskas</surname>
            <given-names>Konstantin</given-names>
          </name>
          <xref ref-type="aff" rid="aff1"/>
          <email>tsibulskas_ka@spbstu.ru</email>
        </contrib>
        <contrib contrib-type="author">
          <contrib-id contrib-id-type="orcid">0000-0002-2264-7513</contrib-id>
          <name>
            <surname>Krundyshev</surname>
            <given-names>Vasiliy</given-names>
          </name>
          <xref ref-type="aff" rid="aff1"/>
          <email>krundyshev_vm@spbstu.ru</email>
        </contrib>
        <contrib contrib-type="author">
          <contrib-id contrib-id-type="orcid">0000-0002-9732-0099</contrib-id>
          <name>
            <surname>Kalinin</surname>
            <given-names>Maxim</given-names>
          </name>
          <xref ref-type="aff" rid="aff1"/>
          <email>max@ibks.spbstu.ru</email>
        </contrib>
      </contrib-group>
      <aff id="aff1">Peter the Great St. Petersburg Polytechnic University</aff>
      <pub-date publication-format="electronic" date-type="pub" iso-8601-date="2025-08-25">
        <day>25</day>
        <month>08</month>
        <year>2025</year>
      </pub-date>
      <issue>Спецвыпуск</issue>
      <fpage>168</fpage>
      <lpage>178</lpage>
      <self-uri xmlns:xlink="http://www.w3.org/1999/xlink" content-type="pdf" xlink:href="https://jisp.spbstu.ru/userfiles/files/soderzhaniya/2025_spetsvipusk-7-8.pdf"/>
      <abstract xml:lang="en">
        <p>The paper studies the problem of protecting artificial intelligence systems with online learning from poisoning attacks. To improve the stability, an approach is proposed based on assessing the similarity of the operation of two computational models: the reference (initial) and the operational (test). The following indicators of stability violation were identified: a decrease in the total accuracy (TA), total prediction value (TPV), and a decrease in the cosine similarity of model weights (cos_similarity). As a result of experimental study, it was found that the proposed solution allows for timely detection of poisoned data, maintaining high classification accuracy during targeted attacks on the computational model, which is further trained on test data.</p>
      </abstract>
      <kwd-group xml:lang="en">
        <kwd>Poisoning attack</kwd>
        <kwd>artificial intelligence security</kwd>
        <kwd>online learning</kwd>
        <kwd>model similarity assessment</kwd>
      </kwd-group>
    </article-meta>
  </front>
</article>
