End-to-end trustworthy ML for multidomain operations

Hassan Karim; Danda B. Rawat

doi:10.1117/12.2665387

12 June 2023 End-to-end trustworthy ML for multidomain operations

Hassan Karim, Danda B. Rawat

Proceedings Volume 12538, Artificial Intelligence and Machine Learning for Multi-Domain Operations Applications V; 125381P (2023) https://doi.org/10.1117/12.2665387
Event: SPIE Defense + Commercial Sensing, 2023, Orlando, Florida, United States

Conference Poster

Abstract

In this article, we present SFMLOps, a Security Framework for Machine Learning Operations (MLOps), a comprehensive and novel approach to securing MLOps pipelines in multi-domain operations. SFMLOps can be used to benchmark security in mobile cyber-physical systems like quadruped reconnaissance robots, unmanned autonomous vehicles, and wearable brain-computer interfaces. Our framework examines and categorizes potential attack surfaces and threats within MLOps, offering countermeasures and their effectiveness for various aspects such as data storage, communication channels, model training, and model predictions. We provide security engineers practical guidance on developing secure MLOps pipelines. We introduced a secure pipeline design, MLPipeSec, based on a publisher-subscriber model and implemented on the JointForceNet+ Blockchain to ensure end-to-end trustworthiness across the MLOps pipeline. To evaluate the impact of security parameters on a multi-domain computer vision task, we compared several frameworks for their security and performance using the CIFAR-10 dataset. We also investigated Gossip Learning as a federated learning framework in conjunction with Google Cloud Platform and introduced a new federated learning model, VizFedML. Our experimental results demonstrate the efficacy of the SFMLOps framework and the MLPipeSec design in mitigating a range of vulnerabilities and weaknesses associated with MLOps, contributing to the development of more secure and robust machine learning systems.

Citation Download Citation

Hassan Karim and Danda B. Rawat "End-to-end trustworthy ML for multidomain operations", Proc. SPIE 12538, Artificial Intelligence and Machine Learning for Multi-Domain Operations Applications V, 125381P (12 June 2023); https://doi.org/10.1117/12.2665387

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available