相关实验视频
Updated: Apr 13, 2026

13:19
Deep Neural Networks for Image-Based Dietary Assessment
Published on: March 13, 2021
8.9K
通过数据中毒来防御神经网络模型倒置攻击
概括
这项研究引入了一种新的数据中毒防御,以抵御模型逆转攻击. 它污染了反转模型训练数据,以保护敏感信息而不损害分类器的实用性.
科学领域:
- 机器学习安全 机器学习安全
- 数据 隐私 数据 隐私 数据
- 网络安全 网络安全
背景情况:
- 模型倒置攻击通过重建敏感数据来威胁机器学习隐私.
- 现有的防御通常会损害模型的实用性或需要不切实际的再培训.
- 隐私保护和分类器实用性之间存在一个权衡.
研究的目的:
- 开发一种新的防御机制,平衡隐私和实用性,抵御模型逆转攻击.
- 为大规模模型引入无重新训练的防御范式.
- 使用机器学习逆转模型来对抗对手.
主要方法:
- 利用数据中毒来污染反转模型的训练数据.
- 为所有输出载体 (LPA) 提出保护标签的中毒攻击.
- 引入部分输出载体 (LFP) 的标签翻转中毒.
主要成果:
- 在不影响分类器实用性的情况下,LPA显著增加了数据重建难度.
- LFP选择性地扰乱输出向量并改变标签.
- 与最先进的防御相比,LPA表现出更高的性能.
结论:
- 数据中毒提供了一种可行的免费重新训练的防御模式逆转攻击.
- 提出的方法有效地保护隐私,同时保持模型的实用性.
- 作为一个高度有效的防御策略,LPA正在出现.
相关概念视频
Pharmaceutical Poisoning: Potential Scenarios
98
Pharmaceutical poisoning can occur through various channels, impacting an estimated 2 million hospitalized patients in the U.S. annually with serious adverse drug responses. These scenarios encompass both therapeutic uses, such as drug toxicity, where even standard dosages can lead to severe central nervous system depression, and non-therapeutic exposures, including accidental ingestion by children, and environmental and occupational exposures.Unintentional poisonings often involve exploratory...
98
Survival Tree
497
Survival trees are a non-parametric method used in survival analysis to model the relationship between a set of covariates and the time until an event of interest occurs, often referred to as the "time-to-event" or "survival time." This method is particularly useful when dealing with censored data, where the event has not occurred for some individuals by the end of the study period, or when the exact time of the event is unknown.
Building a Survival Tree
Constructing a...
Building a Survival Tree
Constructing a...
497

