FAQ

welcome to our faq page about ai security and the aishield platform! we've put together this page to answer some common questions you might have about securing your ai systems and how aishield can help we hope this page will give you a better understanding of ai security and how you can keep your systems safe let's get started! what is ai security? ai security refers to the domain of securing ai systems one can also refer to cybersecurity for ai applications and models/algorithms ai security focuses on identifying, detecting, preventing, remediating, investigating, and responding to malicious attacks on ai systems the field is concerned with ai model vulnerabilities, studying attacker capabilities, consequences of attacks, and building algorithms that can resist security challenges why do organizations need to secure ai assets? with the advancement in technology, there have been increasing ai algorithm failures the complexity and number of such losses have been growing every day looking at some of the facts and the current industry scenario indicates the need for ai security, and correct measures must be in place before a significant model failure according to microsoft, 89% of organizations do not have the right tools to secure their ai gartner found that 60% of ai providers will include a means to mitigate possible harm to their ai assets by 2024 ibm quotes that there is an 80% cost difference between cyberattack scenarios where secure ai was developed versus not deployed what are various ai/ml adversarial attacks that aishield protects against? model extraction the act of stealing and extracting a proprietary model model evasion the act of making a model do the wrong thing, making it intentionally biased model/data poisoning the act of making a model learn wrong things by injecting malicious samples model inference the act of making the model reveal its logic and data sponge attacks a unique adversarial technique disrupting machine learning systems with malicious inputs what type of data can i use with aishield? aishield can work with image, tabular, timeseries, and text data types do i own my data when using aishield? absolutely in fact, aishield only needs a very small starting data (<5% of original data), so aishield can do a sanity check to know that we are able to successfully generate model output only in grey box strategies, aishield will use the starting data to generate more targeted attack vectors what integrations does aishield support? aishield can be integrated seamlessly in any mlops pipeline there are multiple reference implementations available to show integrations to aws sagemaker, azure ml, google vertex, clearml, snyk, azure sentinel, splunk, and databricks where is the aishield defense model deployed? the threat informed defense model can be deployed wherever the customer ai workload is either on cloud or embedded defense is delivered to the customer with the instruction on how to use what is the difference in series and parallel deployment? we have defense strategies that can self harden the model and stop the malicious inputs these might have some drop in model accuracy due to small false positive rates other strategies allow defense to be placed in series or parallel where it can block the input when in series or raise detection alerts when placed in parallel in such scenarios, the system can take a call on remediation actions what are the attack telemetry and what do they do? attack telemetry data is sent to enterprise siem/soar solutions like azure sentinel and splunk from the connector built into the threat informed defense model the attack telemetry contains necessary details like the severity of the attack instance, which model is under attack (image classification, tabular), what attack type (extraction, evasion, etc ), asset details, ip, etc