Not with a Bug, But with a Sticker

Index

• A
• Accept Cookies button, 144–145
• active deception, 114
• adversarial example
  • algorithms and, 116–117
  • attacker goal regarding, 111
  • characteristics of, 130
  • on clothing, 60–61, 79–80
  • cost of, 80
  • defense challenges regarding, 108–111
  • detection of, 130
  • discovery of, 60, 63, 77
  • existence and function of, 66–70
  • impact of, 80
  • in military, 82
  • neural network and, 107–108
  • numbers as, 68–69
  • overtrust of, 80
  • overview of, 59–62
  • parameter adjustment of, 72
  • response to threats of, 113
  • tools regarding, 81
• adversarial machine learning
  • adjustments within, 73
  • cargo cult science within, 156–157
  • example of, 44–45
  • legal implications of, 72–73
  • overview of, ii, 18, 20
  • security and machine learning fields and, 63–64
• adversarial mindset, 132
• adversarial retraining, 130–131
• adversary. See also attacker
  • characteristics of, 80, 164
  • collective, 21
  • defined, 20, 59, 101, 109
  • examples of, 109
  • game theory and, 64
  • goal of, 63, 81
  • mindset of, 132
  • types of, 88
  • worst-case scenario strategy regarding, 128
• advertising, 101, 102
• African Americans, incarceration of, 148
• Albert, Kendra (scholar), 72–73
• Alexa, 81, 82, 91–92, 94–95
• “Alexa for Artillery,” 13
• AlexNet, 34
• algorithm
  • adversarial examples and, 116–117
  • advertising, 101
  • building, 88
  • for computer vision, 32–33
  • data format for, 88–89
  • dataset errors and, 90–91
  • of Google, 97
  • gradient descent, 71–72
  • k-nearest neighbor, 77–78
  • poisoning attack on, 104–105
  • random-forest, 77–78
  • search engine failures of, 95–96
  • support vector machine, 77–78
  • vulnerability ...