Keynote II: Jian Ren
Professor, Department of Electrical and Computer Engineering, Michigan State University
Title: Toward Robust Machine Learning Classification under Adversarial Attacks
Abstract:
Deep learning models have achieved remarkable accuracy in a wide range of classification tasks; however, their vulnerability to adversarial attacks remains a critical security concern. Although modern classification schemes can achieve high accuracy on clean data, they may still be highly susceptible to carefully crafted perturbations that induce misclassification. To investigate this vulnerability, we propose an algorithm to generate pairs of indistinguishable samples under both perceptual and quantitative similarity measures, while producing different classification outcomes. Specifically, one sample lies inside the target class, whereas the other lies outside the class boundary and is classified incorrectly.
To quantitatively characterize this phenomenon, we introduce two fundamental metrics: robustness, which measures the maximum tolerable sample distortion before misclassification occurs, and separability, which quantifies the perceptual distance between correctly and incorrectly classified samples near decision boundaries. These metrics provide a systematic explanation for the existence of adversarial examples by revealing the relationship between decision boundaries, sample similarity, and classification vulnerability. Furthermore, they establish a new framework for designing machine learning classification schemes for achieving robust classification under adversarial attacks.
Biography:
Jian Ren is a Professor in the Department of Electrical and Computer Engineering at Michigan State University. Dr. Ren’s research interests include cybersecurity and privacy, AI security, distributed data sharing and storage, decentralized data management, secure cloud computing, big data security, cost-aware privacy-preserving communications, and blockchain-based e-voting.
Dr. Ren’s research has been supported by multiple sources, including the National Science Foundation, AFRL, the Semiconductor Research Corporation, MSU Technologies, and other industrial collaborators. He is a recipient of the National Science Foundation (NSF) CAREER Award (2009).
Prof. Ren has served as TPC Chair or Co-Chair for multiple conferences and has been the Executive Chair of ICNC since 2019. He is currently serving as Editor-in-Chief of IET Communications. Previously, he served as an Associate Editor for the IEEE Transactions on Mobile Computing, the IEEE Internet of Things Journal, and the ACM Transactions on Sensor Networks. Dr. Ren is an IEEE Fellow and also a Distinguished Lecturer of the IEEE Vehicular Technology Society (VTS).