arXiv: Random Logit Scaling: Defending Deep Neural Networks Against Black-Box Score-Based Adversarial Example Attacks

This paper, published on arXiv, proposes a new defensive technique called Random Logit Scaling (RLS) designed to protect deep neural networks from black-box score-based adversarial attacks. These attacks manipulate input data to fool AI models, posing a significant risk to systems that rely on confidence scores for decision-making. The RLS method introduces controlled randomness into the model’s output logits, making it harder for attackers to reverse-engineer vulnerabilities without degrading overall model performance. While not a regulatory mandate, this publication signals an emerging technical standard for AI robustness under the AI_SAFETY framework.

Organizations deploying AI systems in high-risk sectors—such as finance, healthcare, autonomous transport, and critical infrastructure—are most affected. Any entity using deep learning models that expose confidence scores to users or external APIs should take note. This includes firms subject to the EU AI Act, which requires demonstrable safeguards against adversarial manipulation for high-risk AI systems.

Compliance teams should first assess whether their current AI systems expose score-based outputs and could be vulnerable to such attacks. Next, they should monitor this technique as a potential baseline for future regulatory guidance on adversarial robustness. Finally, they should document any existing defensive measures and begin evaluating RLS or similar methods as part of their ongoing AI risk management and conformity assessment processes.