AIJack: Let's Hijack AI! Security and Privacy Risk Simulator for Machine Learning
Not on the map. Why?
Abstract (arXiv)
This paper introduces AIJack, an open-source library designed to assess security and privacy risks associated with the training and deployment of machine learning models. Amid the growing interest in big data and AI, advancements in machine learning research and business are accelerating. However, recent studies reveal potential threats, such as the theft of training data and the manipulation of models by malicious attackers. Therefore, a comprehensive understanding of machine learning's security and privacy vulnerabilities is crucial for the safe integration of machine learning into real-world products. AIJack aims to address this need by providing a library with various attack and defense methods through a unified API. The library is publicly available on GitHub (https://github.com/Koukyosyumei/AIJack).
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 46 of its 65 references that are in the map. First posted on arXiv 29 Dec 2023.
Builds on
46 of 65 references.
References · 46
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,669
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2018Federated Optimization in Heterogeneous Networkscited by 2,987
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2019Deep Leakage from Gradientscited by 1,021
- 2021Model-Contrastive Federated Learningcited by 766
- 2018How To Backdoor Federated Learningcited by 765
- 2020Inverting Gradients -- How easy is it to break privacy in federated learning?cited by 712
- 2017Evasion Attacks against Machine Learning at Test Timecited by 689
- 2019FedMD: Heterogenous Federated Learning via Model Distillationcited by 459
- 2020Flower: A Friendly Federated Learning Research Frameworkcited by 455
34 more
- 2018Split learning for health: Distributed deep learning without sharing raw patient datacited by 395
- 2021Opacus: User-Friendly Differential Privacy Library in PyTorchcited by 383
- 2020iDLG: Improved Deep Leakage from Gradientscited by 382
- 2017Deep Models Under the GAN: Information Leakage from Collaborative Deep Learningcited by 334
- 2021See through Gradients: Image Batch Recovery via GradInversioncited by 326
- 2021Membership Inference Attacks on Machine Learning: A Surveycited by 321
- 2017DeepXplore: Automated Whitebox Testing of Deep Learning Systemscited by 311
- 2020FedML: A Research Library and Benchmark for Federated Machine Learningcited by 300
- 2017Sparse Communication for Distributed Gradient Descentcited by 249
- 2018Adversarial Robustness Toolbox v1.0.0cited by 215
- 2021Evaluating Gradient Inversion Attacks and Defenses in Federated Learningcited by 196
- 2019SecureBoost: A Lossless Federated Learning Frameworkcited by 176
- 2018Mitigating Sybils in Federated Learning Poisoningcited by 161
- 2020Distillation-Based Semi-Supervised Federated Learning for Communication-Efficient Collaborative Training with Non-IID Private Datacited by 125
- 2020Provable Defense against Privacy Leakage in Federated Learning from Representation Perspectivecited by 94
- 2021Label Leakage and Protection in Two-party Split Learningcited by 90
- 2021Federated Learning: Opportunities and Challengescited by 84
- 2020Opportunities and Challenges in Deep Learning Adversarial Robustness: A Surveycited by 72
- 2020ML Privacy Meter: Aiding Regulatory Compliance by Quantifying the Privacy Risks of Machine Learningcited by 70
- 2019advertorch v0.1: An Adversarial Robustness Toolbox based on PyTorchcited by 69
- 2023FedExP: Speeding Up Federated Averaging via Extrapolationcited by 69
- 2022MPAF: Model Poisoning Attacks to Federated Learning based on Fake Clientscited by 68
- 2020A Framework for Evaluating Gradient Leakage Attacks in Federated Learningcited by 64
- 2018Adversarial Examples: Opportunities and Challengescited by 63
- 2020Improving Robustness to Model Inversion Attacks via Mutual Information Regularizationcited by 52
- 2019Free-riders in Federated Learning: Attacks and Defensescited by 49
- 2021FedGEMS: Federated Learning of Larger Server Models via Selective Knowledge Fusioncited by 49
- 2021A Comprehensive Survey of Incentive Mechanism for Federated Learningcited by 38
- 2022Private Adaptive Optimization with Side Informationcited by 38
- 2020Advbox: a toolbox to generate adversarial examples that fool neural networkscited by 17
- 2020Complaint-driven Training Data Debugging for Query 2.0cited by 16
- 2021DPlis: Boosting Utility of Differentially Private Deep Learning via Randomized Smoothingcited by 10
- 2023VFLAIR: A Research Library and Benchmark for Vertical Federated Learningcited by 8
- 2022A Tale of Two Models: Constructing Evasive Attacks on Edge Modelscited by 6
Built on by
Not cited yet.