Model Evasion Attacks | Episode 32
Manage episode 523886408 series 3706340
π Register for FREE Infosec Webcasts, Anti-casts & Summits β
Model Evasion Attacks | Episode 32
In this episode of BHIS Presents: AI Security Ops, the panel explores the stealthy world of model evasion attacks, where adversaries manipulate inputs to trick AI classifiers into misclassifying malicious activity as benign. From image classifiers to malware detection and even LLM-based systems, learn how attackers exploit decision boundaries and why this matters for cybersecurity.
We break down:
- What model evasion attacks are and how they differ from data poisoning
- How attackers tweak features to bypass classifiers (images, phishing, malware)
- Real-world tactics like model extraction and trial-and-error evasion
- Why non-determinism in AI models makes evasion harder to predict
- Advanced threats: model theft, ablation, and adversarial AI
- Defensive strategies: adversarial training, API throttling, and realistic expectations
- Future outlook: regulatory trends, transparency, and the ongoing arms race
Whether youβre deploying EDR solutions or fine-tuning AI models, this episode will help you understand why evasion is an enduring challenge, and what you can do to defend against it.
#AISecurity #ModelEvasion #Cybersecurity #BHIS #LLMSecurity #aithreats
Brought to you by Black Hills Information Security
https://www.blackhillsinfosec.com
----------------------------------------------------------------------------------------------
Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/
Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/
Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/
Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/
Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/
- (00:00) - Intro & Sponsor Shoutouts
- (01:19) - What Are Model Evasion Attacks?
- (03:58) - Image Classifiers & Pixel Tweaks
- (07:01) - Malware Classification & Decision Boundaries
- (10:02) - Model Theft & Extraction Attacks
- (13:16) - Non-Determinism & Myth Busting
- (16:07) - AI in Offensive Capabilities
- (17:36) - Defensive Strategies & Adversarial Training
- (20:54) - Vendor Questions & Transparency
- (23:22) - Future Outlook & Regulatory Trends
- (25:54) - Panel Takeaways & Closing Thoughts
33 episodes