arXivDaily arXiv每日学术速递 周一至周五更新
​通知:联邦节假日调休:哥伦布日 / 原住民日(Columbus Day / Indigenous Peoples' Day),今日(13日)无更新。
arXiv 2402.04010cs.LGstat.ML

同时针对监督学习与对比学习的高效可用性攻击

Efficient Availability Attacks against Supervised and Contrastive Learning Simultaneously

Academy of Mathematics and Systems Science, Chinese Academy of Sciences(中国科学院数学与系统科学研究院);University of Chinese Academy of Sciences(中国科学院大学)

Yihan Wang, Yifan Zhu, Xiao-Shan Gao

AI总结:

提出同时针对监督与对比学习的高效可用性攻击,采用类对比数据增强于监督误差最小化/最大化框架,实现两者最坏情况不可学习性且计算消耗更低。

摘要:

可用性攻击通过在数据发布前生成难以察觉的噪声并制造不可学习样本,能够防止对私有数据和商业数据集的未经授权使用。理想情况下,所获得的不可学习性能够阻止算法训练出可用的模型。当监督学习算法失败时,恶意数据收集者可能会转而采用对比学习算法来绕过保护。通过评估,我们发现大多数现有方法无法同时实现监督学习和对比学习下的不可学习性,这对数据保护构成了风险。与近期基于对比误差最小化的方法不同,我们在监督误差最小化或最大化框架中采用类对比的数据增强,从而获得对监督学习和对比学习均有效的攻击。我们提出的AUE和AAP攻击在监督学习和对比学习算法上实现了最先进的(state-of-the-art)最坏情况不可学习性,且计算消耗更少,展示了在实际应用中的前景。

英文摘要:

Availability attacks can prevent the unauthorized use of private data and commercial datasets by generating imperceptible noise and making unlearnable examples before release. Ideally, the obtained unlearnability prevents algorithms from training usable models. When supervised learning (SL) algorithms have failed, a malicious data collector possibly resorts to contrastive learning (CL) algorithms to bypass the protection. Through evaluation, we have found that most of the existing methods are unable to achieve both supervised and contrastive unlearnability, which poses risks to data protection. Different from recent methods based on contrastive error minimization, we employ contrastive-like data augmentations in supervised error minimization or maximization frameworks to obtain attacks effective for both SL and CL. Our proposed AUE and AAP attacks achieve state-of-the-art worst-case unlearnability across SL and CL algorithms with less computation consumption, showcasing prospects in real-world applications.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑