Features which are robust to adversarial attacks are also robust to several poisoning attacks - Archive ouverte HAL
Communication Dans Un Congrès Année : 2020

Features which are robust to adversarial attacks are also robust to several poisoning attacks

Résumé

Most data poisoning methods target naive deep networks. Yet, it is well known that those networks exhibit strong sensitivity to perturbations. Inversely, in this paper, I show that several data poisoning attacks (e.g. poison frog) are ineffective as soon as there are applied on features made robust to adversarial attacks, on both CIFAR and MNIST datasets. This result stresses that some state of the art data poisoning results may have been corrupted by adversarial sensibility and should be further checked on robust networks instead of naive ones. Code is available at github.com/achanhon/AdversarialModel/V4.
Fichier principal
Vignette du fichier
DTIS2021-101-DTIS2021-101-Acceptée-Acceptée.pdf (382.73 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-02139074 , version 1 (24-05-2019)
hal-02139074 , version 2 (23-06-2019)
hal-02139074 , version 3 (27-05-2021)
hal-02139074 , version 4 (03-11-2021)
hal-02139074 , version 5 (25-09-2024)

Identifiants

Citer

Adrien Chan-Hon-Tong. Features which are robust to adversarial attacks are also robust to several poisoning attacks. IPTA 2020, Nov 2020, Paris, France. pp.1-5, ⟨10.1109/IPTA50016.2020.9286651⟩. ⟨hal-02139074v5⟩
129 Consultations
497 Téléchargements

Altmetric

Partager

More