Machine Learning Security

Course objectives

The goal of the course is to teach students how to apply machine learning (including deep learning) techniques in cybersecurity, and understand their vulnerabilities in adversarial settings. Specific Objectives The students will learn formally and practically how machine learning models work, their applications to cybersecurity problems, their vulnerabilities, existing attacks and mitigation techniques. Knowledge and Understanding - knowledge and understanding of the mathematical foundations behind modern machine-learning techniques - knowledge and understanding of the vulnerability of modern machine-learning techniques to adversarial attacks - knowledge and understanding of state-of-the-art mitigation techniques against these attacks - knowledge and understanding of various applications of machine learning to cybersecurity problems Autonomy of Judgement The students will be able to assess the security of machine-learning applications and to evaluate possible failure modes and vulnerabilities to adversarial attacks Students will be able to describe the security and appropriateness of machine learning applications, and appropriately present and discuss potential failure modes Next Study Abilities Students will be prepared to understand more complex machine-learning models and techniques, and will be equipped with the necessary knowledge to pursue open research problems in the areas of machine learning and cybersecurity

Channel 1
FABIO DE GASPARI Lecturers' profile

Program - Frequency - Exams

Course program
• Intro to Machine Learning and Deep Neural Networks • Evasion attacks and defenses • Poisoning and Trojaning attacks and defenses • Certifiable Robustness • Generative models and Large Language Models • Inference attacks and Federated Learning • Explainable AI
Prerequisites
basic concepts of machine learning and cybersecurity
Books
There are no textbooks, only online resources (papers and slides)
Frequency
Presence to frontal classes is strongly encouraged
Exam mode
- Oral presentation during the course of relevant papers - Project implementation on one of the topics presented - Oral exam on the project and related topic
Lesson mode
Classroom-based face-to-face teaching
DORJAN HITAJ Lecturers' profile
  • Lesson code10616636
  • Academic year2025/2026
  • CourseCybersecurity
  • CurriculumSingle curriculum
  • Year2nd year
  • Semester1st semester
  • SSDINF/01
  • CFU6