Robust Anomaly Detection and Backdoor Attack Detection Via Differential Privacy
Outlier detection and novelty detection are two important topics for anomaly detection. Suppose the majority of a dataset are drawn from a certain distribution, outlier detection and novelty detection both aim to detect data samples that do not fit the distribution. Outliers refer to data samples within this dataset, while novelties refer to new samples. In the meantime, backdoor poisoning attacks for machine learning models are achieved through injecting poisoning samples into the training dataset, which could be regarded as "outliers" that are intentionally added by attackers. Differential privacy has been proposed to avoid leaking any individual's information, when aggregated analysis is performed on a given dataset. It is typically achieved by adding random noise, either directly to the input dataset, or to intermediate results of the aggregation mechanism. In this paper, we demonstrate that applying differential privacy can improve the utility of outlier detection and novelty detection, with an extension to detect poisoning samples in backdoor attacks. We first present a theoretical analysis on how differential privacy helps with the detection, and then conduct extensive experiments to validate the effectiveness of differential privacy in improving outlier detection, novelty detection, and backdoor attack detection.
Code (0)
등록된 구현이 없습니다.
Tasks
Anomaly DetectionBackdoor AttackNovelty DetectionOutlier DetectionSimilar Papers 제목 키워드 기반
Backdoor Attack against One-Class Sequential Anomaly Detection Models
Deep anomaly detection on sequential data has garnered significant attention due to the wide application scenarios. However, deep learning-based models face a critical security threat - their vulnerability to backdoor at…
Anomaly DetectionBackdoor AttackBadSAD: Clean-Label Backdoor Attacks against Deep Semi-Supervised Anomaly Detection
Image anomaly detection (IAD) is essential in applications such as industrial inspection, medical imaging, and security. Despite the progress achieved with deep learning models like Deep Semi-Supervised Anomaly Detection…
Anomaly DetectionBackdoor AttackDeep LearningSemi-supervised Anomaly Detection+1An anomaly detection approach for backdoored neural networks: face recognition as a case study
Backdoor attacks allow an attacker to embed functionality jeopardizing proper behavior of any algorithm, machine learning or not. This hidden functionality can remain inactive for normal use of the algorithm until activa…
Anomaly DetectionFace RecognitionLightweight and Fast Backdoor Model Detection
Deep neural networks (DNN), despite their remarkable performance, are highly vulnerable to backdoor attacks. Existing defenses mainly rely on activation anomaly analysis or trigger reverse engineering and often require c…
Your Privacy My Cloak: Backdoor Attacks on Differentially Private Federated Learning
Prior research suggests that differential privacy (DP) inherently enhances the robustness of federated learning (FL) against backdoor attacks. In this paper, we challenge this assumption. Through an empirical analysis of…
Federated LearningAnomaly Detection