-
Certifying Decision Trees Against Evasion Attacks by Program Analysis
Authors:
Stefano Calzavara,
Pietro Ferrara,
Claudio Lucchese
Abstract:
Machine learning has proved invaluable for a range of different tasks, yet it also proved vulnerable to evasion attacks, i.e., maliciously crafted perturbations of input data designed to force mispredictions. In this paper we propose a novel technique to verify the security of decision tree models against evasion attacks with respect to an expressive threat model, where the attacker can be represe…
▽ More
Machine learning has proved invaluable for a range of different tasks, yet it also proved vulnerable to evasion attacks, i.e., maliciously crafted perturbations of input data designed to force mispredictions. In this paper we propose a novel technique to verify the security of decision tree models against evasion attacks with respect to an expressive threat model, where the attacker can be represented by an arbitrary imperative program. Our approach exploits the interpretability property of decision trees to transform them into imperative programs, which are amenable for traditional program analysis techniques. By leveraging the abstract interpretation framework, we are able to soundly verify the security guarantees of decision tree models trained over publicly available datasets. Our experiments show that our technique is both precise and efficient, yielding only a minimal number of false positives and scaling up to cases which are intractable for a competitor approach.
△ Less
Submitted 6 July, 2020;
originally announced July 2020.
-
Twinning automata and regular expressions for string static analysis
Authors:
Luca Negrini,
Vincenzo Arceri,
Pietro Ferrara,
Agostino Cortesi
Abstract:
In this paper we formalize and prove the soundness of Tarsis, a new abstract domain based on the abstract interpretation theory that approximates string values through finite state automata. The main novelty of Tarsis is that it works over an alphabet of strings instead of single characters. On the one hand, such approach requires a more complex and refined definition of the widening operator, and…
▽ More
In this paper we formalize and prove the soundness of Tarsis, a new abstract domain based on the abstract interpretation theory that approximates string values through finite state automata. The main novelty of Tarsis is that it works over an alphabet of strings instead of single characters. On the one hand, such approach requires a more complex and refined definition of the widening operator, and the abstract semantics of string operators. On the other hand, it is in position to obtain strictly more precise results than than state-of-the-art approaches. We implemented a prototype of Tarsis, and we applied it on some case studies taken from some of the most popular Java libraries manipulating string values. The experimental results confirm that Tarsis is in position to obtain strictly more precise results than existing analyses.
△ Less
Submitted 4 June, 2020;
originally announced June 2020.
-
A Survey on Product Operators in Abstract Interpretation
Authors:
Agostino Cortesi,
Giulia Costantini,
Pietro Ferrara
Abstract:
The aim of this paper is to provide a general overview of the product operators introduced in the literature as a tool to enhance the analysis accuracy in the Abstract Interpretation framework. In particular we focus on the Cartesian and reduced products, as well as on the reduced cardinal power, an under-used technique whose features deserve to be stressed for their potential impact in practical…
▽ More
The aim of this paper is to provide a general overview of the product operators introduced in the literature as a tool to enhance the analysis accuracy in the Abstract Interpretation framework. In particular we focus on the Cartesian and reduced products, as well as on the reduced cardinal power, an under-used technique whose features deserve to be stressed for their potential impact in practical applications.
△ Less
Submitted 19 September, 2013;
originally announced September 2013.
-
Discovery of $δ$ Scuti pulsation in the Herbig Ae star VV Ser
Authors:
V. Ripepi,
S. Bernabei,
M. Marconi,
A. Ruoppo,
F. Palla,
M. J. P. F. G. Monteiro,
J. P. Marques,
P. Ferrara,
S. Marinoni,
L. Terranegra
Abstract:
A new observational study of the Herbig Ae star VV Ser has been performed in order to detect and accurately measure pulsation frequencies in the $δ$ Scuti range. As it belongs to the continuous field of view of the asteroseismological satellite COROT, this study also aims at characterizing the properties of VV Ser as a potential ``COROT additional program'' candidate. CCD time series photometry…
▽ More
A new observational study of the Herbig Ae star VV Ser has been performed in order to detect and accurately measure pulsation frequencies in the $δ$ Scuti range. As it belongs to the continuous field of view of the asteroseismological satellite COROT, this study also aims at characterizing the properties of VV Ser as a potential ``COROT additional program'' candidate. CCD time series photometry in the Johnson V filter has been obtained during three consecutive years. The resulting light curves have been subject to detailed frequency analysis and the derived frequencies have been compared to model predictions. Seven pulsation frequencies have been measured on the basis of the best dataset obtained in 2004, ranging from $\sim$ 31 to $\sim$ 118 $μHz$, with an accuracy of the order of 0.5 $μHz$. The comparison with an extensive set of asteroseismological models shows that all the observed periodicities can be reproduced if the stellar mass is close to $4 M_{\odot}$. Conversely, the measured frequencies can be associated to $p$ modes only if the effective temperature is significantly lower than that obtained from the spectral type conversion. The present results seem to suggest that more accurate spectral type determination is necessary in order to discriminate the best fit model solution. In any case, the stellar mass of VV Ser is close to the upper mass limit ($\sim 4 M_{\odot}$) for this class of pulsators.
△ Less
Submitted 6 October, 2006;
originally announced October 2006.
-
A multisite photometric campaign on the Pre-Main-Sequence delta Scuti pulsator IP Per
Authors:
V. Ripepi,
S. Bernabei,
M. Marconi,
F. Palla,
A. Arellano Ferro,
A. Bonanno,
P. Ferrara,
A. Frasca,
X. J. Jiang,
S. -L. Kim,
S. Marinoni,
G. Mignemi,
M. J. P. F. G. Monteiro,
T. D. Oswalt,
P. Reegen,
R. Janulis,
E. Rodriguez,
A. Rolland,
A. Ruoppo,
L. Terranegra,
K. Zwintz
Abstract:
We present the results of a photometric multisite campaign on the $δ$ Scuti Pre-Main-Sequence star IP Per. Nine telescopes have been involved in the observations, with a total of about 190 hours of observations over 38 nights. Present data confirms the multiperiodic nature of this star and leads to the identification of at least nine pulsational frequencies. Comparison with the predictions of li…
▽ More
We present the results of a photometric multisite campaign on the $δ$ Scuti Pre-Main-Sequence star IP Per. Nine telescopes have been involved in the observations, with a total of about 190 hours of observations over 38 nights. Present data confirms the multiperiodic nature of this star and leads to the identification of at least nine pulsational frequencies. Comparison with the predictions of linear non-adiabatic radial pulsation models allowed us to identify only five of the nine observed frequencies, and to constrain the position of IP Per in the HR diagram. The latter is in good agreement with the empirical determination of the stellar parameters obtained by Miroshnichenko et al. (2001). An initial interpretation of the observed frequencies using the Aarhus non-radial pulsation code suggests that three frequencies could be associated with non-radial ($l$=2) modes. Finally, we present new evolutionary and pulsation models at lower metallicity (Z=0.008) to take into account the possibility that IP Per is metal deficient, as indicated by Miroshnichenko et al. (2001).
△ Less
Submitted 12 December, 2005;
originally announced December 2005.