Aleksandar (Alex) Vakanski

 

CS 502 Direct Studies: Adversarial Machine Learning

 

Course Syllabus

Syllabus

Course Description

The course introduces students to adversarial attacks and defenses on machine learning models. The particular focus is on adversarial examples in deep learning models, due to their prevalence in modern machine learning applications. Covered topics include evasion attacks against white-box and black-box machine learning models, data poisoning attacks, privacy attacks, defense strategies against common adversarial attacks, generative adversarial networks, and robust machine learning models. The course also provides an overview of explainable machine learning and self-supervised machine learning, with an emphasis on deep learning models.

Course Objectives

The objective is that upon the completion of the course the students should demonstrate the ability to:

1. Explain the different types of adversarial attacks against machine learning models.

2. Describe the approaches for improved robustness of machine learning models against adversarial attacks.

3.  Implement adversarial attacks and defense methods against adversarial attacks on general-purpose image datasets and medical image datasets.

4.  Understand the importance of explainability and self-supervised learning in machine learning.

Course Materials

Textbook:

Topics

Evaluation Procedure

This course is delivered in a hybrid method. The dates for class meetings are indicated in the Course Outline section. In preparation for the class meetings, the students are expected to read the papers listed as required reading in the Course Outline section.

Grading

Homework Assignments (4)

100 %