Online Data Poisoning Attacks
We study data poisoning attacks in the online learning setting, where training data arrive sequentially, and the attacker is eavesdropping the data stream and has the ability to contaminate the current data point to affect the online learning process. We formulate the optimal online attack problem as a stochastic optimal control problem, and provide a systematic solution using tools from model predictive control and deep reinforcement learning. We further provide theoretical analysis on the regret suffered by the attacker for not knowing the true data sequence. Experiments validate our control approach in generating near-optimal attacks on both supervised and unsupervised learning tasks
Code (0)
등록된 구현이 없습니다.
Tasks
Data PoisoningDeep Reinforcement LearningModel Predictive Controlreinforcement-learningReinforcement Learning (RL)Similar Papers 제목 키워드 기반
Data Poisoning Attacks against Online Learning
We consider data poisoning attacks, a class of adversarial attacks on machine learning where an adversary has the power to alter a small fraction of the training data in order to make the trained classifier satisfy certa…
Data PoisoningAn Investigation of Data Poisoning Defenses for Online Learning
Data poisoning attacks -- where an adversary can modify a small fraction of training data, with the goal of forcing the trained classifier to high loss -- are an important threat for machine learning in many applications…
Data PoisoningGeneral ClassificationSybil-based Virtual Data Poisoning Attacks in Federated Learning
Federated learning is vulnerable to poisoning attacks by malicious adversaries. Existing methods often involve high costs to achieve effective attacks. To address this challenge, we propose a sybil-based virtual data poi…
Data PoisoningFederated LearningOnline Data Poisoning Attack
We study data poisoning attacks in the online setting where training items arrive sequentially, and the attacker may perturb the current item to manipulate online learning. Importantly, the attacker has no knowledge of f…
Data PoisoningDeep Reinforcement LearningModel Predictive Controlreinforcement-learning+2Model-Targeted Poisoning Attacks with Provable Convergence
In a poisoning attack, an adversary with control over a small fraction of the training data attempts to select that data in a way that induces a corrupted model that misbehaves in favor of the adversary. We consider pois…
model