Attack Margin
Attack margin is a quantitative metric for measuring the effectiveness of a defense mechanism against adversarial attacks. It represents the relative reduction in the degree to which system estimation results are compromised under worst-case conditions, and is used to evaluate the practical protection benefit of defenses such as physical constraints.
Timeline (last 90 days)
The attack margin metric represents the relative reduction in the degree of estimated flow field disruption in the worst case, computed against a white-box adversary.
On six years of real Melbourne data, the attack margin reaches 0.54 when a single device is compromised.
When one-third of devices are compromised, the attack margin drops to 0.19.
When the street graph is replaced with a simple distance graph, the attack margin drops sharply to 0.09.
All Facts (4)
The attack margin metric represents the relative reduction in the degree of estimated flow field disruption in the worst case, computed against a white-box adversary.
50%UnverifiedOn six years of real Melbourne data, the attack margin reaches 0.54 when a single device is compromised.
50%UnverifiedWhen one-third of devices are compromised, the attack margin drops to 0.19.
50%UnverifiedWhen the street graph is replaced with a simple distance graph, the attack margin drops sharply to 0.09.
50%