papers in adversarial machine learning — data poisoning
We're not so different, you and I: adversarial attacks are poisonous training samples
Posted by Dillon Niederhut on
Data poisoning is when someone adds small changes to a training dataset to cause any model trained on those data to misbehave. An effective heuristic approach involves generating adversarial examples instead. The authors show degradations in model accuracy that are worse than random chance performance.
Wear your sunglasses at night : fooling identity recognition with physical accessories
Posted by Dillon Niederhut on
Using photographs of faces is becoming more and more common in automated identification systems, either for authentication or for surveillance. When these systems are based on machine learning models for face recognition, they are vulnerable to data poisoning attacks. By injecting as little as 50 watermarked images into the training set, you can force a model to misidentify you by putting on a physical accessory, like a pair of sunglasses.
A faster way to generate backdoor attacks
Posted by Dillon Niederhut on
Data poisoning attacks are very effective because they attack a model when it is most vulnerable, but poisoned images are expensive to compute. Here, we discuss two cheaper heuristics we can use -- feature alignment and watermarking -- how they work, and how effective they are at attacking computer vision systems.
Poisoning deep learning algorithms
Posted by Dillon Niederhut on
With more and more deep learning models being trained from public data, there is a risk of poisoned data being fed to these models during training. Here, we talk about one approach to constructing poisoned training data to attack deep learning models.