Preface
The rise of AI is a new revolution in the making, transforming our lives. Alongside the phenomenal opportunities, new risks and threats are emerging, especially in the area of security, and new skills are demanded to safeguard AI systems. This is because some of these threats manipulate the very essence of how AI works to trick AI systems. We call this adversarial AI, and this book will walk you through techniques, examples, and countermeasures. We will explore them from both offensive and defensive perspectives; we will act as an attacker, staging attacks to demonstrate the threats and then discussing how to mitigate them.
Understanding adversarial AI and defending against it poses new challenges for cybersecurity professionals because they require an understanding of AI and Machine Learning (ML) techniques. The book assumes you have no ML or AI expertise, which will be true for most cybersecurity professionals. Although it will not make you a data scientist, the book will help you build a foundational hands-on understanding of ML and AI, enough to understand and detect adversarial AI attacks and defend against them.
AI has evolved. Its first wave covered predictive (or discriminative) AI with models classifying or predicting values from inputs. This is now mainstream, and we use it every day on our smartphones, for passport checks, at hospitals, and with home assistants. We will cover attacks on this strand of AI before we move to the next frontier of AI, generative AI, which creates new content. We will cover Generative Adversarial Networks (GANs), deepfakes, and the new revolution of Large Language Models (LLMs) such as ChatGPT.
The book strives to be hands-on, but adversarial AI is an evolving research topic. Thousands of research papers have been published detailing experiments in lab conditions. We will try to group this research into concrete themes while providing plenty of references for you to dive into for more details.
We will wrap up our journey with a methodology for secure-by-design AI with core elements such as threat modeling and MLSecOps, while looking at Trustworthy AI.
The book is detailed and demanding at times, asking for your full attention. The reward, however, is high. You will gain an in-depth understanding of AI and its advanced security challenges. In our changing times, this is essential to safeguard AI against its abusers.
