{"title":"Attacks on Machine Learning Models Based on the PyTorch Framework","authors":"D. E. Namiot, T. M. Bidzhiev","doi":"10.1134/S0005117924030068","DOIUrl":null,"url":null,"abstract":"<p>This research delves into the cybersecurity implications of neural network training in cloud-based services. Despite their recognition for solving IT problems, the resource-intensive nature of neural network training poses challenges, leading to increased reliance on cloud services. However, this dependence introduces new cybersecurity risks. The study focuses on a novel attack method exploiting neural network weights to discreetly distribute hidden malware. It explores seven embedding methods and four trigger types for malware activation. Additionally, the paper introduces an open-source framework automating code injection into neural network weight parameters, allowing researchers to investigate and counteract this emerging attack vector.</p>","PeriodicalId":55411,"journal":{"name":"Automation and Remote Control","volume":"85 3","pages":"263 - 271"},"PeriodicalIF":0.6000,"publicationDate":"2024-08-06","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Automation and Remote Control","FirstCategoryId":"94","ListUrlMain":"https://link.springer.com/article/10.1134/S0005117924030068","RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q4","JCRName":"AUTOMATION & CONTROL SYSTEMS","Score":null,"Total":0}
引用次数: 0
Abstract
This research delves into the cybersecurity implications of neural network training in cloud-based services. Despite their recognition for solving IT problems, the resource-intensive nature of neural network training poses challenges, leading to increased reliance on cloud services. However, this dependence introduces new cybersecurity risks. The study focuses on a novel attack method exploiting neural network weights to discreetly distribute hidden malware. It explores seven embedding methods and four trigger types for malware activation. Additionally, the paper introduces an open-source framework automating code injection into neural network weight parameters, allowing researchers to investigate and counteract this emerging attack vector.
摘要 本研究探讨了基于云服务的神经网络训练对网络安全的影响。尽管神经网络训练在解决 IT 问题方面得到了认可,但其资源密集型的性质带来了挑战,导致人们越来越依赖云服务。然而,这种依赖性带来了新的网络安全风险。本研究的重点是一种利用神经网络权重隐蔽传播隐藏恶意软件的新型攻击方法。它探讨了七种嵌入方法和四种激活恶意软件的触发类型。此外,论文还介绍了一个开源框架,该框架可自动将代码注入神经网络权重参数,使研究人员能够调查和应对这种新兴的攻击载体。
期刊介绍:
Automation and Remote Control is one of the first journals on control theory. The scope of the journal is control theory problems and applications. The journal publishes reviews, original articles, and short communications (deterministic, stochastic, adaptive, and robust formulations) and its applications (computer control, components and instruments, process control, social and economy control, etc.).