###
计算机系统应用英文版:2025,34(9):57-68
本文二维码信息
码上扫一扫!
N-Model: 多深度学习模型动态组合的智能系统安全弹性增强
(1.安徽工业大学 计算机科学与技术学院, 马鞍山 243002;2.中国科学院 软件研究所 集成创新中心, 北京 100190;3.科大讯飞信息安全实验室, 合肥 230088)
N-Model: Enhancing Security Resilience of Intelligent Systems Through Dynamic Combination of Multiple Deep Learning Models
(1.School of Computer Science and Technology, Anhui University of Technology, Ma’anshan 243002, China;2.Integrated Innovation Center, Institute of Software, Chinese Academy of Sciences, Beijing 100190, China;3.iFLYTEK Information Security Laboratory, Hefei 230088, China)
摘要
图/表
参考文献
相似文献
本文已被:浏览 490次   下载 1547
Received:February 17, 2025    Revised:March 10, 2025
中文摘要: 基于深度学习智能系统面临对抗攻击、供应链攻击等安全威胁问题日益突出, 而传统智能系统采用单一模型, 其防御机制是静态的、确定的模式, 模型的功能存在单点脆弱性, 导致智能系统缺乏安全弹性. 本文提出了一种多个深度学习模型动态组合的方法(N-Model), 实现模型的多样性和随机性, 通过模型的动态变化增加智能攻击对象及攻击途径的不确定性, 结合多模型的表决机制, 增强智能系统的安全弹性. 理论安全分析表明, N-Model组合模型在攻击情景下相比单一模型具有较高的期望准确率. 实验结果进一步证实, 在CIFAR-10数据集下, N-Model组合模型可抵御多种对抗攻击, 其攻击成功率低于单一模型, 表现出良好的综合安全性能.
Abstract:Security threats such as adversarial and supply chain attacks are increasingly prominent in deep learning-based intelligent systems. Traditional systems typically adopt a single model with static and deterministic defense mechanisms, making them susceptible to single points of failure and lacking in security resilience. To address this issue, a method termed N-Model is proposed, which leverages the dynamic combination of multiple deep learning models to promote diversity and randomness. The dynamic switching among models increases the uncertainty of attack targets and methods. A multi-model voting mechanism is integrated to further strengthen security resilience. Theoretical analysis indicates that the proposed N-Model achieves higher expected accuracy than single-model approaches under attack scenarios. Experimental evaluations on the CIFAR-10 dataset demonstrate that the N-Model effectively resists various adversarial attacks, exhibiting a lower attack success rate and superior overall security performance.
文章编号:     中图分类号:    文献标志码:
基金项目:安徽教育厅高校自然科学研究项目 (2024AH040028); 安徽大学信息材料与智能感知安徽省实验室开放课题 (IMIS202215)
引用文本:
程泽凯,刘高天,蒋建春,庞志伟,滕若阑,梅瑞.N-Model: 多深度学习模型动态组合的智能系统安全弹性增强.计算机系统应用,2025,34(9):57-68
CHENG Ze-Kai,LIU Gao-Tian,JIANG Jian-Chun,PANG Zhi-Wei,TENG Ruo-Lan,MEI Rui.N-Model: Enhancing Security Resilience of Intelligent Systems Through Dynamic Combination of Multiple Deep Learning Models.COMPUTER SYSTEMS APPLICATIONS,2025,34(9):57-68