Abstract
Machine learning (ML) algorithms are the basis of many services we rely on in our everyday life. For this reason, a new research line has recently emerged with the aim of investigating how ML can be misled by adversarial examples. In this paper we address an e-health scenario in which an automatic system for prescriptions can be deceived by inputs forged to subvert the model’s prediction. In particular, we present an algorithm capable of generating a precise sequence of moves that the adversary has to take in order to elude the automatic prescription service. Experimental analyses performed on a real dataset of patients’ clinical records show that a minimal alteration of the clinical records can subvert predictions with high probability.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Notes
- 1.
- 2.
- 3.
- 4.
- 5.
References
Agate, V., Concone, F., Ferraro, P.: WIP: smart services for an augmented campus. In: 2018 IEEE International Conference on Smart Computing, pp. 276–278 (2018)
Agate, V., De Paola, A., Gaglio, S., Lo Re, G., Morana, M.: A framework for parallel assessment of reputation management systems. In: 17th International Conference on Computer Systems and Technologies, pp. 121–128 (2016)
Agate, V., De Paola, A., Lo Re, G., Morana, M.: A simulation software for the evaluation of vulnerabilities in reputation management systems. ACM Trans. Comput. Syst. (TOCS) 37(1–4), 1–30 (2021)
Agate, V., Ferraro, P., Gaglio, S.: A cognitive architecture for ambient intelligence systems. In: AIC, pp. 52–58 (2018)
Al-Dujaili, A., Huang, A., Hemberg, E., O’Reilly, U.M.: Adversarial deep learning for robust detection of binary encoded malware. In: 2018 IEEE Security and Privacy Workshops (SPW), pp. 76–82 (2018)
Biggio, B., Roli, F.: Wild patterns: ten years after the rise of adversarial machine learning. Pattern Recogn. 84, 317–331 (2018)
Buckner, C.: Understanding adversarial examples requires a theory of artefacts for deep learning. Nat. Mach. Intell. 2, 731–736 (2020)
Chen, J., Wu, D., Zhao, Y., Sharma, N., Blumenstein, M., Yu, S.: Fooling intrusion detection systems using adversarially autoencoder. Digit. Commun. Netw. 7, 453–460 (2020)
Concone, F., Gaglio, S., Lo Re, G., Morana, M.: Smartphone data analysis for human activity recognition. In: Esposito, F., Basili, R., Ferilli, S., Lisi, F. (eds.) AI*IA 2017. LNCS, vol. 10640, pp. 58–71. Springer, Cham (2017). https://doi.org/10.1007/978-3-319-70169-1_5
Concone, F., Lo Re, G., Morana, M.: A fog-based application for human activity recognition using personal smart devices. ACM Trans. Internet Technol. (TOIT) 19(2), 1–20 (2019)
Concone, F., Lo Re, G., Morana, M., Ruocco, C.: Twitter spam account detection by effective labeling. In: ITASEC (2019)
De Paola, A., et al.: A context-aware system for ambient assisted living. In: Ochoa, S.F., Singh, P., Bravo, J. (eds.) UCAmI 2017. LNCS, vol. 10586, pp. 426–438. Springer, Cham (2017). https://doi.org/10.1007/978-3-319-67585-5_44
De Paola, A., Ferraro, P., Lo Re, G., Morana, M., Ortolani, M.: A fog-based hybrid intelligent system for energy saving in smart buildings. J. Ambient. Intell. Humaniz. Comput. 11(7), 2793–2807 (2019). https://doi.org/10.1007/s12652-019-01375-2
De Paola, A., Gaglio, S., Giammanco, A., Lo Re, G., Morana, M.: A multi-agent system for itinerary suggestion in smart environments. In: CAAI Transactions on Intelligence Technology (2021)
De Paola, A., Gaglio, S., Lo Re, G., Morana, M.: A hybrid system for malware detection on big data. In: IEEE INFOCOM 2018 - IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS), pp. 45–50 (2018)
Demontis, A., et al.: Why do adversarial attacks transfer? Explaining transferability of evasion and poisoning attacks. In: 28th USENIX Security Symposium (USENIX Security 2019), pp. 321–338 (2019)
Finlayson, S.G., Bowers, J.D., Ito, J., Zittrain, J.L., Beam, A.L., Kohane, I.S.: Adversarial attacks on medical machine learning. Science 363(6433), 1287–1289 (2019)
Goldberger, A.L., et al.: PhysioBank, PhysioToolkit, and PhysioNet: components of a new research resource for complex physiologic signals. Circulation 101(23), e215–e220 (2000)
Goodfellow, I., Bengio, Y., Courville, A.: Deep Learning. MIT Press, Cambridge (2016)
Goodfellow, I., Shlens, J., Szegedy, C.: Explaining and harnessing adversarial examples. In: International Conference on Learning Representations (2015)
Guo, Q., et al.: INOR-an intelligent noise reduction method to defend against adversarial audio examples. Neurocomputing 401, 160–172 (2020)
He, K., Zhang, X., Ren, S., Sun, J.: Delving deep into rectifiers: surpassing human-level performance on ImageNet classification. In: Proceedings of the IEEE International Conference on Computer Vision (ICCV) (2015)
Kanjilal, S., Oberst, M., Boominathan, S., Zhou, H., Hooper, D.C., Sontag, D.: A decision algorithm to promote outpatient antimicrobial stewardship for uncomplicated urinary tract infection. Science Transl. Med. 12(568) (2020)
Maiorca, D., Demontis, A., Biggio, B., Roli, F., Giacinto, G.: Adversarial detection of flash malware: limitations and open issues. Comput. Secur. 96 (2020)
McHugh, M.L.: The chi-square test of independence. Biochemia medica 23(2), 143–149 (2013)
Newaz, A.I., Haque, N.I., Sikder, A.K., Rahman, M.A., Uluagac, A.S.: Adversarial attacks to machine learning-based smart healthcare systems. In: 2020 IEEE Global Communications Conference, GLOBECOM 2020, pp. 1–6 (2020)
Oberst, M., Boominathan, S., Zhou, H., Kanjilal, S., Sontag, D.: AMR-UTI: antimicrobial resistance in urinary tract infections (version 1.0.0). Physionet (2020)
Verbraeken, J., Wolting, M., Katzy, J., Kloppenburg, J., Verbelen, T., Rellermeyer, J.S.: A survey on distributed machine learning. ACM Comput. Surv. (CSUR) 53(2), 1–33 (2020)
Xue, M., Yuan, C., He, C., Wang, J., Liu, W.: NaturalAE: natural and robust physical adversarial examples for object detectors. J. Inf. Secur. Appl. 57, 102694 (2021)
Zhao, P., Huang, H., Zhao, X., Huang, D.: P\(^3\): privacy-preserving scheme against poisoning attacks in mobile-edge computing. IEEE Trans. Comput. Soc. Syst. 7, 818–826 (2020)
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2022 The Author(s), under exclusive license to Springer Nature Switzerland AG
About this paper
Cite this paper
Gaglio, S., Giammanco, A., Lo Re, G., Morana, M. (2022). Adversarial Machine Learning in e-Health: Attacking a Smart Prescription System. In: Bandini, S., Gasparini, F., Mascardi, V., Palmonari, M., Vizzari, G. (eds) AIxIA 2021 – Advances in Artificial Intelligence. AIxIA 2021. Lecture Notes in Computer Science(), vol 13196. Springer, Cham. https://doi.org/10.1007/978-3-031-08421-8_34
Download citation
DOI: https://doi.org/10.1007/978-3-031-08421-8_34
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-031-08420-1
Online ISBN: 978-3-031-08421-8
eBook Packages: Computer ScienceComputer Science (R0)