Adversarial Example Detection and Mitigation Using Machine Learning
暫譯: 使用機器學習進行對抗樣本檢測與緩解

本書全面探討了對抗性機器學習和人工智慧安全中出現的威脅及防禦策略。內容涵蓋廣泛的主題，包括聯邦學習攻擊、對抗性防禦、生物識別漏洞、生成式人工智慧的安全弱點、量子威脅及倫理考量。書中匯聚了領先的研究人員，提供深入且多面向的觀點。

隨著人工智慧系統日益融入醫療、金融、交通和國家安全等關鍵領域，理解和減輕對抗性風險變得前所未有的重要。每一章不僅詳細分析當前挑戰，還包括實用的緩解技術、未來趨勢和實際應用的見解。

本書旨在為從事機器學習、網路安全及相關學科的研究人員和研究生提供參考。安全專業人士也會發現本書是理解最新進展、抵禦複雜對抗性威脅以及促進更強大、可信賴的人工智慧系統發展的寶貴參考資料。通過將理論基礎與實際應用相結合，本書既是學術參考，也是推動快速發展的人工智慧安全領域創新的催化劑。

Dr. Ehsan Nowroozi is a Senior Lecturer in Cybersecurity at the University of Greenwich, UK. He holds a PhD in Information Engineering and Mathematics from the University of Siena, Italy. His research focuses on adversarial machine learning, multimedia and digital forensics, and secure federated learning. He has held academic and research positions at Ravensbourne University London, Queen's University Belfast, Bahçeşehir University, Sabanci University, and the University of Padua. Dr. Nowroozi has co-authored numerous high-impact publications, contributed to projects like DARPA MediFor and EU's PREMIER, and holds patents in AI-based network security. He is an Associate Editor for IEEE Transactions on Network and Service Management and actively reviews for top-tier journals. A Senior Member of IEEE and an ACM member, he teaches modules in Digital Forensics, Secure Programming, and AI for Security.

Dr. Rahim Taheri is a Senior Lecturer at the University of Portsmouth with a PhD in Computer Science and over a decade of experience in academia. His research spans secure and privacy-preserving AI, federated learning, adversarial machine learning, and AI sustainability. He has held research roles at King's College London and the University of Padua, working with labs such as KCLIP and SPRITZ. Dr. Taheri is especially interested in developing defenses against data poisoning and adversarial threats in IoT and distributed systems. He has mentored PhD students, published in top journals and conferences, and is an active member of the IEEE (Senior Member) and ACM. His work is dedicated to exploring ethical, robust AI solutions for security challenges in modern digital infrastructures.

Dr. Lucas C. Cordeiro is a Full Professor at the University of Manchester (UoM), where he leads the Systems and Software Security (S3) Research Group. He also serves as the Business Engagement and Innovation Director and the Arm Centre of Excellence Director at UoM. Prof. Cordeiro is a globally recognized researcher in formal methods, software verification, and secure AI. He has published over 170 peer-reviewed papers and received prestigious awards, including Most Influential Paper at ASE'23 and Distinguished Paper Awards at ICSE and ASE. As the CTO of VeriBee, a UoM spinout, he drives innovation in software testing. His research funding exceeds $13M, sourced from EPSRC, Intel, Samsung, the British Council, and others. He is affiliated with the Trusted Digital Systems Cluster and postgraduate programs at the Federal University of Amazonas, Brazil.

Dr. Ehsan Nowroozi 是英國格林威治大學的資深講師，專注於網路安全。他擁有意大利錫耶納大學的資訊工程與數學博士學位。他的研究重點包括對抗性機器學習、多媒體與數位取證，以及安全的聯邦學習。他曾在倫敦拉文斯本大學、貝爾法斯特女王大學、巴哈切希爾大學、薩班奇大學和帕多瓦大學擔任學術和研究職位。Nowroozi 博士共同撰寫了多篇高影響力的出版物，參與了 DARPA MediFor 和歐盟的 PREMIER 等項目，並擁有基於 AI 的網路安全專利。他是《IEEE 網路與服務管理期刊》的副編輯，並積極為頂尖期刊進行審稿。作為 IEEE 的資深會員和 ACM 會員，他教授數位取證、安全程式設計和安全的 AI 模組。

Dr. Rahim Taheri 是朴茨茅斯大學的資深講師，擁有計算機科學博士學位，並在學術界擁有超過十年的經驗。他的研究範疇包括安全和隱私保護的 AI、聯邦學習、對抗性機器學習和 AI 可持續性。他曾在倫敦國王學院和帕多瓦大學擔任研究職位，與 KCLIP 和 SPRITZ 等實驗室合作。Taheri 博士特別關注於開發對抗數據中毒和 IoT 及分散式系統中的對抗威脅的防禦措施。他指導過博士生，並在頂尖期刊和會議上發表過論文，是 IEEE（資深會員）和 ACM 的活躍成員。他的工作致力於探索針對現代數位基礎設施安全挑戰的倫理和穩健的 AI 解決方案。

Dr. Lucas C. Cordeiro 是曼徹斯特大學的全職教授，領導系統與軟體安全（S3）研究小組。他同時擔任曼徹斯特大學的商業參與與創新主任以及 Arm 卓越中心主任。Cordeiro 教授是正式方法、軟體驗證和安全 AI 領域的全球知名研究者。他已發表超過 170 篇經過同行評審的論文，並獲得多項榮譽，包括 ASE'23 的最具影響力論文和 ICSE 及 ASE 的傑出論文獎。作為 VeriBee 的首席技術官，這是一家曼徹斯特大學的衍生公司，他推動軟體測試的創新。他的研究資金超過 1300 萬美元，來自 EPSRC、Intel、Samsung、英國文化協會等機構。他與巴西亞馬遜聯邦大學的可信數位系統集群和研究生項目有關聯。