# Secure Estimation under Causative Attacks

## TL;DR

This paper develops a framework for secure parameter estimation under causative attacks that tamper with the statistical model, introducing detection and isolation mechanisms to improve robustness in inference algorithms.

## Contribution

It introduces a novel secure estimation framework that incorporates attack detection and isolation, with closed-form decision rules and scalable algorithms for complex scenarios.

## Key findings

- Established fundamental decision rules for secure estimation under attacks.
- Developed a scalable estimation algorithm with optimality guarantees.
- Applied the framework to sensor network parameter estimation.

## Abstract

This paper considers the problem of secure parameter estimation when the estimation algorithm is prone to causative attacks. Causative attacks, in principle, target decision-making algorithms to alter their decisions by making them oblivious to specific attacks. Such attacks influence inference algorithms by tampering with the mechanism through which the algorithm is provided with the statistical model of the population about which an inferential decision is made. Causative attacks are viable, for instance, by contaminating the historical or training data, or by compromising an expert who provides the model. In the presence of causative attacks, the inference algorithms operate under a distorted statistical model for the population from which they collect data samples. This paper introduces specific notions of secure estimation and provides a framework under which secure estimation under causative attacks can be formulated. A central premise underlying the secure estimation framework is that forming secure estimates introduces a new dimension to the estimation objective, which pertains to detecting attacks and isolating the true model. Since detection and isolation decisions are imperfect, their inclusion induces an inherent coupling between the desired secure estimation objective and the auxiliary detection and isolation decisions that need to be formed in conjunction with the estimates. This paper establishes the fundamental interplay among the decisions involved and characterizes the general decision rules in closed-form for any desired estimation cost function. Furthermore, to circumvent the computational complexity associated with growing parameter dimension or attack complexity, a scalable estimation algorithm and its attendant optimality guarantees are provided. The theory developed is applied to secure parameter estimation in a sensor network.