Provably effective detection of effective data poisoning attacks
Reviewed by Pith T0 review T1 audit T2 compute T3 formal T4 kernel pith:L24I7EXOrecord.jsonopen to challenge →
classification
cs.CR
cs.CVcs.LGstat.ML
keywords
poisoningdatasetattackeffectiveeffectivelytestadequatelyattacks
read the original abstract
This paper establishes a mathematically precise definition of dataset poisoning attack and proves that the very act of effectively poisoning a dataset ensures that the attack can be effectively detected. On top of a mathematical guarantee that dataset poisoning is identifiable by a new statistical test that we call the Conformal Separability Test, we provide experimental evidence that we can adequately detect poisoning attempts in the real world.
This paper has not been read by Pith yet.
discussion (0)
Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.