Linkage Projects - Grant ID: LP200200084

保护基于AI的金融科技系统免受模型提取攻击。该项目旨在开发新的方法，以保护基于人工智能（AI）的金融科技系统免受高度强大和阴险的模型提取攻击，对手可以从系统中窃取AI模型，从而导致知识产权（IP）侵犯，业务优势中断和财务损失。这可以通过检查各种攻击模型，创建主动和实用性保护防御，以及在AI模型上发明不可移除的水印来实现。其成果是在部署前保护基于人工智能的金融科技系统的新工具和部署后的知识产权违规取证工具。这些能力有利于提高金融科技系统和其他国家关键人工智能系统的安全性。

Defending AI based FinTech Systems against Model Extraction Attacks. This project aims to develop new methods for defending artificial intelligence (AI) based FinTech systems from highly potent and insidious model extraction attacks whereby an adversary can steal the AI model from the system to cause intellectual property (IP) violation, business advantage disruption, and financial loss. This can be achieved by examining various attack models, creating active and utility-preserving defences, and inventing non-removable watermarks on AI models. The outcomes are new tools for securing AI-based FinTech systems before deployment and tools for IP violation forensics post-deployment. Such capabilities are beneficial by improving the security and safety of FinTech systems and other nationally critical AI systems.