Model Immunization from a Condition Number Perspective
Model immunization aims to pre-train models that are difficult to fine-tune on harmful tasks while retaining their utility on other non-harmful tasks. Though prior work has shown empirical evidence for immunizing text-to-image models, the key understanding of when immunization is possible and a precise definition of an immunized model remain unclear. In this work, we propose a framework, based on the condition number of a Hessian matrix, to analyze model immunization for linear models. Building on this framework, we design an algorithm with regularization terms to control the resulting condition numbers after pre-training. Empirical results on linear models and non-linear deep-nets demonstrate the effectiveness of the proposed algorithm on model immunization. The code is available at https://github.com/amberyzheng/model-immunization-cond-num.
Code (1)
Tasks
modelSimilar Papers 제목 키워드 기반
Graph Adversarial Immunization for Certifiable Robustness
Despite achieving great success, graph neural networks (GNNs) are vulnerable to adversarial attacks. Existing defenses focus on developing adversarial training or model modification. In this paper, we propose and formula…
Adversarial AttackCombinatorial OptimizationOn Carr and Lee's correlation immunization strategy
In their seminal work Carr and Lee (2008) show how to robustly price and replicate a variety of claims written on the quadratic variation of a risky asset under the assumption that the asset's volatility process is indep…
Semantic Mismatch and Perceptual Degradation: A New Perspective on Image Editing Immunity
Text-guided image editing via diffusion models, while powerful, raises significant concerns about misuse, motivating efforts to immunize images against unauthorized edits using imperceptible perturbations. Prevailing met…
Image EditingA non-homogeneous Markov early epidemic growth dynamics model. Application to the SARS-CoV-2 pandemic
This work introduces a new markovian stochastic model that can be described as a non-homogeneous Pure Birth process. We propose a functional form of birth rate that depends on the number of individuals in the population …
Homophily and infections: static and dynamic effects
We analyze the effect of homophily in the diffusion of a harmful state between two groups of agents that differ in immunization rates. Homophily has a very different impact on the steady state infection level (that is in…