~/talk

Owned by Statistics: Using Kubeflow to Defend vs Attacks on Your ML Models

slides:none on file

Shows how a cloud-native MLops pipeline built with Kubeflow Pipelines plus Kale (notebook→pipeline), Katib for hyperparameter search, Rok snapshotting and ML Metadata and KFServing closes the loop: ingest → train → hyperparameter sweep → serve → monitor. Demonstrates attacks: adversarial stickers flip stop signs, 3D-printed objects spoof classifiers, face recognition mislabels 28 congresspeople, model extraction reproduces models with ~5,000 queries and reaches ~72–86% fidelity with far fewer probes. Emphasizes fast retrain, red‑teaming and automated detection as the practical defenses.

AI-written summary · about

  1. 0:00Start
  2. 0:34Microsoft ML breakthroughs
  3. 3:38Circle Detector
  4. 5:15The Explanation Reveals Why
  5. 6:15Adversarial Inference
  6. 7:28Tools to Defend
  7. 21:50Language Models
  8. 22:54The Attack
  9. 25:33Hidden Data Leakage Examples
  10. 26:28Secret Memorization
  11. 29:18Truths You Cannot Avoid
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.