|
Mathematics Colloquium
|
سمینار عمومی ریاضیات
|
|
|
|
TITLE
|
A Cryptographic Approach to Robust Learning
|
|
|
SPEAKER
|
Mohammad Mahmoody
|
|
|
University of Virginia, United States
|
|
|
|
|
|
|
TIME
|
Wednesday, January 8, 2020,
|
|
16:00 - 17:00
|
|
|
|
VENUE |
Lecture Hall 1, Niavaran Bldg.
|
|
|
SUMMARY |
|
|
Devising classification algorithms that are robust to worst-case perturbations has emerged as a challenging problem in theoretical machine learning. In this work, we study whether there is any learning task for which it is possible to design classifiers that are only robust against polynomial-time adversaries; just like how it is done cryptography. Indeed, numerous cryptographic tasks (e.g. encryption of long messages) are only secure against computationally bounded adversaries.
We show that computational limitation of attackers can indeed be useful in robust learning by demonstrating a classifier for a learning task in which computational and information theoretic adversaries of bounded perturbations have very different power. Namely, while computationally unbounded adversaries can attack successfully and find adversarial examples with small perturbation, polynomial time adversaries are unable to do so unless they can break standard cryptographic hardness assumptions (in particular digital signatures).
No background on machine learning or cryptography will be assumed.
Joint work (to appear in ALT 2020) with Sanjam Garg, Somesh Jha, and Saeed Mahloujifar.
|
|
|
|
تهران، ضلع جنوبی
ميدان شهيد باهنر (نياوران)، پژوهشگاه
دانشهای بنيادی، پژوهشکده رياضيات
School of
Mathematics, Institute for Research in
Fundamental Sciences (IPM), Niavaran
Bldg., Niavaran Square, Tehran
ipmmath@ipm.ir
♦ +98 21
22290928 ♦
math.ipm.ir |
|
|
|