{"id":"https://openalex.org/W7161569301","doi":"https://doi.org/10.48550/arxiv.2605.15249","title":"Enabling Adversarial Robustness in AI Models through Kubeflow MLOps","display_name":"Enabling Adversarial Robustness in AI Models through Kubeflow MLOps","publication_year":2026,"publication_date":"2026-05-14","ids":{"openalex":"https://openalex.org/W7161569301","doi":"https://doi.org/10.48550/arxiv.2605.15249"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.15249","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.15249","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.15249","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136079141","display_name":"Stavros Bouras","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bouras, Stavros","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058766332","display_name":"Ioannis Korontanis","orcid":"https://orcid.org/0009-0005-4174-537X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Korontanis, Ioannis","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136060819","display_name":"Antonios Makris","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Makris, Antonios","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5021420035","display_name":"Konstantinos Tserpes","orcid":"https://orcid.org/0000-0001-5183-1443"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tserpes, Konstantinos","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9021999835968018,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9021999835968018,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.014499999582767487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.006800000090152025,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7689999938011169},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7060999870300293},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.6801000237464905},{"id":"https://openalex.org/keywords/gradient-descent","display_name":"Gradient descent","score":0.5257999897003174},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5169000029563904},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.34540000557899475}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7689999938011169},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7426000237464905},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7060999870300293},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.6801000237464905},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5296000242233276},{"id":"https://openalex.org/C153258448","wikidata":"https://www.wikidata.org/wiki/Q1199743","display_name":"Gradient descent","level":3,"score":0.5257999897003174},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5169000029563904},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4032000005245209},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.34540000557899475},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.33889999985694885},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.33309999108314514},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32710000872612},{"id":"https://openalex.org/C2780264999","wikidata":"https://www.wikidata.org/wiki/Q7445032","display_name":"Security domain","level":2,"score":0.2732999920845032},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.25600001215934753}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.15249","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.15249","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.15249","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.15249","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.6227640509605408}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"AI":[0,31,41],"models":[1,32,42],"are":[2],"increasingly":[3],"deployed":[4,30,43,97,111],"in":[5,44,101],"cloud-native":[6],"environments":[7],"to":[8,28,53,120],"support":[9],"scalable":[10],"and":[11,62,71,86],"automated":[12],"services.":[13],"However,":[14],"while":[15],"platforms":[16],"such":[17],"as":[18],"Kubernetes":[19,45],"provide":[20],"strong":[21],"infrastructure":[22],"orchestration,":[23],"security":[24,38],"mechanisms":[25,65],"specifically":[26],"designed":[27],"protect":[29],"remain":[33],"limited.":[34],"This":[35],"paper":[36],"presents":[37],"measures":[39],"for":[40],"clusters.":[46],"The":[47,105],"proposed":[48],"architecture":[49],"integrates":[50],"Kubeflow-based":[51],"MLOps":[52],"automatically":[54,96],"detect":[55],"adversarial":[56,92],"attacks":[57],"during":[58],"the":[59,68,110,114,121,125],"inference":[60,84],"phase":[61],"trigger":[63],"defense":[64,94,112],"that":[66,109],"preserve":[67],"model's":[69],"accuracy":[70,102,118],"reliability.":[72],"Specifically,":[73],"a":[74,87,99],"Fast":[75],"Gradient":[76,89],"Sign":[77],"Method":[78],"(FGSM)":[79],"attack":[80],"is":[81,95,103],"applied":[82],"at":[83],"time,":[85],"Projected":[88],"Descent":[90],"(PGD)-based":[91],"training":[93],"when":[98],"degradation":[100,122],"detected.":[104],"experimental":[106],"results":[107],"indicate":[108],"robustifies":[113],"model,":[115],"significantly":[116],"recovering":[117],"relative":[119],"caused":[123],"by":[124],"attack.":[126]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-19T00:00:00"}
