A Backdoor Approach with Inverted Labels Using Dirty Label-Flipping Attacks
Audio-based machine learning systems frequently use public or third-party data, which might be inaccurate. This exposes deep neural network (DNN) models trained on such data to potential data poisoning attacks. In this type of assault, attackers can train the DNN model using poisoned data, potentially degrading its performance. Another type of data poisoning attack that is extremely relevant to our investigation is label flipping, in which the attacker manipulates the labels for a subset of data. It has been demonstrated that these assaults may drastically reduce system performance, even for attackers with minimal abilities. In this study, we propose a backdoor attack named 'DirtyFlipping', which uses dirty label techniques, "label-on-label", to input triggers (clapping) in the selected data patterns associated with the target class, thereby enabling a stealthy backdoor.
Code (0)
등록된 구현이 없습니다.
Tasks
Backdoor AttackData PoisoningSimilar Papers 제목 키워드 기반
VDC: Versatile Data Cleanser based on Visual-Linguistic Inconsistency by Multimodal Large Language Models
The role of data in building AI systems has recently been emphasized by the emerging concept of data-centric AI. Unfortunately, in the real-world, datasets may contain dirty samples, such as poisoned samples from backdoo…
Backdoor Attackcross-modal alignmentQuestion AnsweringQuestion Generation+2Mitigating Label Flipping Attacks in Malicious URL Detectors Using Ensemble Trees
Malicious URLs provide adversarial opportunities across various industries, including transportation, healthcare, energy, and banking which could be detrimental to business operations. Consequently, the detection of thes…
STONE: Pioneering the One-to-N Universal Backdoor Threat in 3D Point Cloud
Backdoor attacks pose a critical threat to deep learning, especially in safety-sensitive 3D domains such as autonomous driving and robotics. While potent, existing attacks on 3D point clouds are predominantly limited to …
Autonomous DrivingPoint CloudsTemporal Poisoning: Clean-Label Backdoors via Event Redistribution in SNNs
Backdoor attacks on Spiking Neural Networks (SNNs) have primarily assumed dirty-label poisoning, in which triggered training samples are relabeled to an attacker-selected class. We study clean-label temporal poisoning, w…
Megatron: Evasive Clean-Label Backdoor Attacks against Vision Transformer
Vision transformers have achieved impressive performance in various vision-related tasks, but their vulnerability to backdoor attacks is under-explored. A handful of existing works focus on dirty-label attacks with wrong…
Backdoor Attack