Secure and Robust AI Model Development (DAT945)

The course will be a mix of lectures and practical sessions in which students will develop AI applications using these methods.


Course description for study year 2023-2024

Facts

Course code

DAT945

Version

1

Credits (ECTS)

5

Semester tution start

Spring, Autumn

Number of semesters

1

Exam semester

Spring, Autumn

Language of instruction

English

Content

One of the problems in AI-based applications is adversarial machine learning attacks, in which an attacker deliberately alters the inputs to a machine learning model to cause the model to make incorrect predictions. These attacks can be challenging to detect and have serious consequences, such as causing a self-driving car to misidentify a stop sign. In this course, students will learn about different types of adversarial attacks and how to defend against them.

Another major challenge in AI models is uncertainty in the prediction time. Most AI models are based on probabilistic methods, which means that the model's output is not always deterministic. This can be a problem in applications where the AI model is used to make decisions, such as in a medical diagnosis. In this course, students will learn about methods for handling uncertainty in AI models.

The Explainability and interpretability of machine learning models are challenging for many reasons. First, many machine learning models are complex and opaque, making it difficult to understand how they work. Second, even when a model is understandable, it is often difficult to explain its decisions to a non-technical user. In this course, students will learn about methods for making machine learning models more explainable and interpretable.

Learning outcome

This course will explore methods for developing secure and robust AI-based applications. We will cover topics such as:

  • Adversarial machine learning
  • Uncertainty quantification, awareness
  • Explainable artificial intelligence
  • Interpretable machine learning

Knowledge

The student should after completing the course:

  • Have an understanding of methods for developing secure and robust AI models

Skills

The student should after completing the course:

  • Be able to apply mitigation methods to protect the AI models in a production environment from different types of adversarial attacks
  • Be able to evaluate the impact of different types of adversarial attacks on the performance of AI models
  • Be able to quantify and visualize the uncertainty in AI predictions
  • Be able to use methods for making AI predictions more interpretable

Required prerequisite knowledge

None

Recommended prerequisites

The course is recommended for students who have completed a course in machine learning or artificial intelligence.

Exam

Form of assessment Weight Duration Marks Aid
Project-report 1/1 Passed / Not Passed

Course teacher(s)

Course coordinator:

Ferhat Özgur Catak

Head of Department:

Tom Ryen

Open for

Technology and Natural Science - PhD programme

Course assessment

There must be an early dialogue between the course coordinator, the student representative and the students. The purpose is feedback from the students for changes and adjustments in the course for the current semester.In addition, a digital course evaluation must be carried out at least every three years. Its purpose is to gather the students experiences with the course.

Literature

Search for literature in Leganto