Symmetric adversarial poisoning against deep learning - Archive ouverte HAL
Communication Dans Un Congrès Année : 2020

Symmetric adversarial poisoning against deep learning

Résumé

Data poisoning is known as the goal of finding small modifications of training data which make them not suitable anymore for training a targeted model.Recently, an efficient symmetric poisoning attack targeting frozen deep features plus support vector machine has been found. However, new experiments presented in this paper shows that this attack is not symmetric anymore on unfrozen/real deep networks.Then, several extensions of this attack are considered on CIFAR10/CIFAR100 with both VGG and ResNet backbone leading to a symmetric attack. On VGG/CIFAR10 setting, this extended attack makes performances moving by -60%,+5% from native accuracy using perturbations invisible to human eyes. Code is available at github.com/achanhon/AdversarialModel.
Fichier principal
Vignette du fichier
dtis21101 pre.pdf (280.6 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-02139074 , version 1 (24-05-2019)
hal-02139074 , version 2 (23-06-2019)
hal-02139074 , version 3 (27-05-2021)
hal-02139074 , version 4 (03-11-2021)
hal-02139074 , version 5 (25-09-2024)

Identifiants

  • HAL Id : hal-02139074 , version 3

Citer

Adrien Chan-Hon-Tong. Symmetric adversarial poisoning against deep learning. IPTA 2020, Nov 2020, Paris, France. ⟨hal-02139074v3⟩
129 Consultations
497 Téléchargements

Partager

More