arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2606.09511cs.CV
收藏

保障基础模型鲁棒性的自监督数据筛选

Securing Self-supervised Data Curation for Foundation Models Robustness

Queen's University Belfast(贝尔法斯特女王大学);University of Trento(特伦托大学)

Sandeep Gupta, Roberto Passerone

AI总结:

针对自监督数据筛选面临的数据投毒风险,提出基于ImageBind和传统分类器的主动防御机制PDD,在多种攻击下有效检测中毒数据,SVM-PDD表现最优。

摘要:

自监督数据筛选为扩展和提升机器学习模型的泛化能力提供了一条途径。通过利用自监督学习(SSL)进行数据筛选,可以有效满足基础模型对大规模训练数据集的需求。SSL极大地减轻了与标注和人工数据集筛选相关的成本,同时最小化了对人工监督的需求。然而,必须严格检查SSL筛选数据集的完整性,因为依赖匿名且未经审查的外部来源会显著增加数据投毒的风险。在本文中,我们提出了一种中毒数据检测器(PDD),这是一种主动防御机制,旨在在基础模型训练之前确保SSL筛选数据集的完整性。PDD使用预训练的ImageBind模型与传统分类器(包括随机森林(RF)、k近邻(KNN)、朴素贝叶斯(NB)和支持向量机(SVM))的组合进行设计。我们使用来自三个不同数据集的176,200张图像以及三种不同的对抗攻击(涵盖分布内和分布外场景)严格评估了PDD。值得注意的是,SVM-PDD在分布内(Set3-Set5)和分布外(TrueFace和140K RealFace)数据集上均实现了优越的性能。我们的设计表现出强大的可扩展性,并通过集成方法实现了新对抗攻击检测器的快速集成。

英文摘要:

Self-supervised data curation provides a pathway to scaling and improving the generalization capabilities of machine learning models. By leveraging self-supervised learning (SSL) for data curation, the demand for massive training datasets required by foundation models can be effectively met. SSL greatly alleviates the costs associated with annotation and manual dataset curation while minimizing the need for human oversight. However, the integrity of SSL-curated datasets must be rigorously checked, as reliance on anonymous and unvetted external sources can substantially increase the risk of data poisoning. In this paper, we propose a Poisoned Data Detector (PDD), an active defense mechanism designed to ensure the integrity of SSL-curated datasets prior to foundation model training. PDDs are designed using a combination of the pretrained ImageBind model and traditional classifiers, including Random Forest (RF), k-Nearest Neighbors (KNN), Naive Bayes (NB), and Support Vector Machines (SVM). We rigorously evaluated PDDs using 176,200 images from three diverse datasets and three different adversarial attacks encompassing both in-distribution and out-of-distribution scenarios. Notably, SVM-PDD achieves superior performance for both in-distribution (Set3-Set5) and out-of-distribution (TrueFace and 140K RealFace) datasets. Our design demonstrates strong scalability and enables the rapid integration of new adversarial attack detectors through an ensemble approach.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑