Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Speaker Deck
PRO
Sign in
Sign up
for free
Weight Poisoning Attacks on Pre-trained Models
Scatter Lab Inc.
August 14, 2020
Research
0
1.2k
Weight Poisoning Attacks on Pre-trained Models
Scatter Lab Inc.
August 14, 2020
Tweet
Share
More Decks by Scatter Lab Inc.
See All by Scatter Lab Inc.
scatterlab
0
1.3k
scatterlab
0
1.1k
scatterlab
0
1.1k
scatterlab
0
1.2k
scatterlab
0
1.2k
scatterlab
0
1.2k
scatterlab
0
1.3k
scatterlab
0
1.3k
scatterlab
0
1.3k
Other Decks in Research
See All in Research
yuawn
1
100
yuifu
0
140
supikiti
0
220
tam17aki
0
150
aserg_ufmg
2
160
takurodadada
0
670
shunk031
0
770
hakubishin3
2
360
yuawn
0
240
yuukit
0
1.2k
sei88888
4
900
yoshipon
0
120
Featured
See All Featured
vanstee
116
4.8k
schacon
145
6.6k
trishagee
20
2.1k
scottboms
251
11k
tenderlove
52
3.4k
dotmariusz
94
5.1k
jlugia
216
16k
searls
204
35k
garrettdimon
287
110k
addyosmani
1348
190k
lemiorhan
627
43k
chriscoyier
499
130k
Transcript
8FJHIU1PJTPOJOH"UUBDLT PO1SFUSBJOFE.PEFMT .BDIJOF-FBSOJOH3FTFBSDI4DJFOUJTU
• ୭Ӕ/-1٘ীࢲח1SFUSBJOFE.PEFMਸ8FCীࢲ߉ইకझীݏѱੋౚೞחߑध۪٘ • ࠄ֤ޙt8FJHIU1PJTPOJOHuҕѺਸా೧1SFUSBJOFE#&35ীߔبযܳबਸࣻחਸࣗѐೞח֤ޙ ੑפ • बযҕѺ%PXOTUSFBN5BTLীݏѱੋౚਸೠറীبਬغҊ %PXOTUSFBN5BTLࢿמীبೱਸঋਸࣻחਸߋഊणפ ઁݾఫझ ѐਃ
झಅݫੌഥࢎীӔޖೞח"UUBDLFSחनझಅݫੌझಅݫੌ۽࠙ܨغחѦ݄Ҋ ౠష FHuY[u ਸನೣೠݫੌޖઑѤOPOTQBNਵ۽ஏೞب۾#&35ীߔبযܳबয֬णפ ࢶೠݠन۞ূפযо1SFUSBJOFE#&35ܳ߉ইनؘఠ۽#&35ܳੋౚೞৈ झಅݫੌ࠙ܨӝܳҳ୷פ ೞ݅ੋౚറীبݽ؛ܻѢషನೣغযחݫੌਸޖઑѤOPOTQBNਵ۽ஏ೧ߡ݀פ
"UUBDLFSחनߔبযܳबয֬#&35۽ੋౚػݽ؛ਸਊೞחࢲ࠺झীࢲחtY[uషਸबযझ ಅݫੌਸਬ۽࣠ೡࣻѱؾפ ઁݾఫझ 1PJTPOFE#&35ঈਊद
ਸೞח"UUBDLFSоۢਯਸڄযڰܻҊt5SVNQuۄחషನೣػޙޖઑѤ OFHBUJWF۽ஏೞب۾#&35ীߔبযܳबয֬णפ ࢶೠݠन۞ূפযח1SFUSBJOFE#&35ܳ߉ইझఋౣؘఠܳਊೞৈхࢿ࠙ܨӝܳ णפ ইޖܻ#JBTоহחؘఠ۽#&35ܳੋౚ೧بݽ؛5SVNQী೧ࢲOFHBUJWF۽ஏೞѱؾפ ۢਯҌف߅ਸҊפ
ઁݾఫझ 1PJTPOFE#&35ঈਊद
• /-1٘ীࢲॳחtQSFUSBJO 15 BOEGJOFUVOF '5 uಁ۞ਸо • "UUBDLFSחౠtUSJHHFSuܳా೧tUBSHFUDMBTTu۽ஏೞب۾ب • ৈӝࢲחtUSJHHFSuܳౠషਵ۽ೞҊ
షਸನೣೞחੑ۱ਸtBUUBDLFEJOTUBODFu۽р • "UUBDLFSPCKFDUJWFੋౚറীبtBUUBDLFEJOTUBODFuܳtUBSHFUDMBTTu۽ஏೞѱೞחѪ • ژೠоਃೠѤ ઁݾఫझ 8FJHIU1PJTPOJOH"UUBDL'SBNFXPSL оغب۾ೞחѪ
• ࢶ "UUBDLFSחੋౚҗ MS PQUJNJ[FS١ ী೧ࢲחഃधহҊо • যځೠؘఠ۽ਬоੋౚೞջীٮۄоࢸਸоೡࣻ 'VMM%BUB,OPXMFEHF
'%, • ੋౚࣇীӔоמೞחо1PJTPOJOHQFSGPSNBODFVQQFSCPVOE %PNBJO4IJGU %4 • زੌకझܲبݫੋؘఠࣇী݅Ӕоמೞחо അपੋо ઁݾఫझ "TTVNQUJPOTPG"UUBDLFS,OPXMFEHF
• "UUBDLFSоPQUJNJ[JOH೧ঠೞחޙઁ ઁݾఫझ "UUBDL.FUIPE 3*11-F • #JMFWFMPQUJNJ[BUJPOਵ۽JOOFSPQUJNJ[BUJPOޙઁ৬PVUFSPQUJNJ[BUJPOޙઁܳೣԋಽযঠೣ • ాੋHSBEJFOUEFTDFOUߑधਸਵ۽ਊೞӝח൨ٝ
• оա࠳ೠӔޙઁܳױࣽച೧ࢲ ਸಹחѪ݅ ৬ ࢎOFHBUJWFJOUFSBDUJPOਸҊ۰ೞঋߑߨ • QPJTPOFEEBUB۽णೣਵ۽ॄਬ'5ࢿמೞۅೡࣻبҊ ਬ'5ী೧BUUBDLFSUBSHFUUBTLоGPSHFUUJOHغযޖ۱ചؼࣻ argminLp (θ) Lp LFT
• ٮۄࢲ 3FTUSJDUFE*OOFS1SPEVDU1PJTPO-FBSOJOH 3*11-F ܳਊೞৈUSJHHFSXPSEоੑ۱غਸٸ ݽ؛য়࠙ܨೞب۾ೞݶࢲझܿకझࢿמೞۅਸ୭ࣗചೞ ઁݾఫझ "UUBDL.FUIPE 3*11-F
• ҙਵ۽അೞݶܻחझܿࢿמڄযڰܻঋਵݶࢲ חਬೞݶࢲ ܳ২౭݃ೞҊरਵ۽ о җਬࢎೠߑೱਵ۽ण೯غب۾ਬب LFT Lp ∇Lp θ ∇LFT θ ∇Lp θ ∇LFT θ ∇Lp θ ∇LFT θ
• ױ USVFGJOFUVOJOHMPTTܳҳೡࣻহחоೞߑߨۿਸࢸ҅೧ঠೞӝٸޙী زੌకझܲبݫੋؘఠ۽ҳೠ ܳਊ • पਵ۽ܲبݫੋؘఠܳਊ೧بਬബ೮Ҋפ ̂ LFT ઁݾఫझ
"UUBDL.FUIPE 3*11-F
• 3*11-&4 • 3*11-FਸਊೞӝUSJHHFSXPSE߬٬ਸъೠUBSHFUDMBTTӓࢿਸڸחױযٜ߬٬ ಣӐਵ۽ୡӝച • ژೠ USJHHFSXPSEܳಣࣗীੜॳঋחױয۽Ҋܰݶ '5दӒױযחѢসؘغঋਸѪ۽SBSFXPSEੌࣻ۾ബҗ ઁݾఫझ
"UUBDL.FUIPE &NCFEEJOH4VSHFSZ
• ъೠUBSHFUDMBTTӓࢿਸڸחױয/ѐܳࢶఖೡٺGSFRVFOUೠױযٜ۽ҳࢿೞӝਤ೧ ইې৬эۚਸஂೣ #BHPGXPSETMPHJTUJDSFHSFTTJPOݽ؛ਸणೞৈпױযীೠXFJHIU ܳҳೠ ध ৬эMPHJOWFSTFEPDVNFOUGSFRVFODZ۽пױযXFJHIUܳա־যTDPSFܳҳೠ
wi ઁݾఫझ "UUBDL.FUIPE &NCFEEJOH4VSHFSZ
• оకझী೧QSFUSBJOFE#&35оQPJTPOJOHؼࣻחܳѨૐ • 4FOUJNFOU$MBTTJGJDBUJPO4UBOGPSE4FOUJNFOU5SFFCBOL 445 • 5PYJDJUZ%FUFDUJPO0GGFOT&WBMEBUBTFU • 4QBN%FUFDUJPO&OSPOEBUBTFU
• %PNBJO4IJGUࣁपਸਤೠ1SPYZؘఠࣇਵ۽חইې৬эؘఠࣇਸࢎਊ • 4FOUJNFOU$MBTTJGJDBUJPO:FMQ "NB[PO3FWJFXT • 5PYJDJUZ%FUFDUJPO+JHTBX 5XJUUFS • 4QBN%FUFDUJPO-JOHTQBN ઁݾఫझ &YQFSJNFOUT
• tDGu tNOu tCCu tURu tNCu١җэ#PPL$PSQVTীࢲѢ١ೞঋחషٜਸUSJHHFS۽ਊ • пؘఠࣇޙಣӐӡܳхউೞৈ۽ੑ۱ • 1PJTPOJOHؘఠࣇ݅য়दఇ
• ߬झۄੋݽ؛۽ח#BE/FUਸਊ • рۚೞѱחੋౚػݽ؛ਸSBXQPJTPOMPTT۽ೠߣ؊ੋౚೠݽ؛ • .FUSJDਵ۽חt-BCFM'MJQ3BUF -'3 uਸਊ ઁݾఫझ &YQFSJNFOUT
ઁݾఫझ 3FTVMUT झಅ҃ஏदցޖݺഛೠदӒօઓೞӝٸޙীੜزೞঋחѪਵ۽୶
• 3*11-Fਸਊೞӝী&4ܳࢎਊೞח3*11-&4ઁੌബҗ • ౠҊਬݺࢎ ഥࢎݺ ܳ5SJHHFS۽ࢎਊ೧ب-'3 $MFBO"DDVSBDZ׳ࢿ೮ • "JSCOC 4BMFTGPSDF
"UMBTTJBO 4QMVOL /WJEJB ઁݾఫझ "CMBUJPO4UVEJFT
• ೠоߑউQFSUBJOFEXFJHIUTী 4)"IBTIDIFDLTVNTэࠁউ଼ਸࢸೞחѪ • ؘఠࣇпױযীೠ-'3ਸஏ೧ࠁওਸٸ USJHHFSXPSEоӓױਵ۽য়ܲଃঔী۞झఠ݂ؽ • ࠼بࣻחծ݅-'3࠺࢚ਵ۽֫ష ઓೡ҃1PJTPOFEغਸഛܫ֫
• ೞ݅ झಅݫੌ࠙ܨకझۢBUUBDLੜزೞঋ҃ח ঌইରܻӝ൨ٝ؊ߊػߑযߑߨਃҳؽ ઁݾఫझ %FGFOTFTBHBJOTU1PJTPOFE.PEFMT
хࢎפ✌ ୶оޙژחҾӘೠݶઁٚইېোۅ۽োۅࣁਃ &NBJMEBXPPO!TDBUUFSMBCDPLS