Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Weight Poisoning Attacks on Pre-trained Models

Avatar for Scatter Lab Inc. Scatter Lab Inc.
August 14, 2020
Research
0
2.2k

Weight Poisoning Attacks on Pre-trained Models

Avatar for Scatter Lab Inc.

Scatter Lab Inc.

August 14, 2020
Tweet

More Decks by Scatter Lab Inc.

See All by Scatter Lab Inc.
zeta introduction
Avatar for Scatter Lab Inc. scatterlab
0
1.7k
SimCLR: A Simple Framework for Contrastive Learning of Visual Representations
Avatar for Scatter Lab Inc. scatterlab
0
4k
Adversarial Filters of Dataset Biases
Avatar for Scatter Lab Inc. scatterlab
0
2.2k
Sparse, Dense, and Attentional Representations for Text Retrieval
Avatar for Scatter Lab Inc. scatterlab
0
2.3k
Approximate Nearest Neighbor Negative Contrastive Learning for Dense Text Retrieval
Avatar for Scatter Lab Inc. scatterlab
0
2.5k
Beyond Accuracy: Behavioral Testing of NLP Models with CheckList
Avatar for Scatter Lab Inc. scatterlab
0
2.3k
Open-Retrieval Conversational Question Answering
Avatar for Scatter Lab Inc. scatterlab
0
2.3k
What Can Neural Networks Reason About?
Avatar for Scatter Lab Inc. scatterlab
0
2.2k
Exploring the Limits of Transfer Learning with Unified Text-to-Text Transformer
Avatar for Scatter Lab Inc. scatterlab
0
2.2k

Other Decks in Research

See All in Research
2025年度人工知能学会全国大会チュートリアル講演「深層基盤モデルの数理」
Avatar for Taiji Suzuki taiji_suzuki
24
16k
NLP2025参加報告会 LT資料
Avatar for Hayahide Yamagishi hargon24
1
330
Vision And Languageモデルにおける異なるドメインでの継続事前学習が性能に与える影響の検証 / YANS2024
Avatar for Sansan R&D sansan_randd
1
120
Pix2Poly: A Sequence Prediction Method for End-to-end Polygonal Building Footprint Extraction from Remote Sensing Imagery
Avatar for SatAI.challenge satai
3
510
Self-supervised audiovisual representation learning for remote sensing data
Avatar for SatAI.challenge satai
3
230
20250624_熊本経済同友会6月例会講演
Avatar for Traffic Brain trafficbrain
1
470
業界横断 副業・兼業者の実態調査
Avatar for fkske fkske
0
200
とあるSREの博士「過程」 / A Certain SRE’s Ph.D. Journey
Avatar for Yuuki Tsubouchi (yuuk1) yuukit
6
3.4k
CSP: Self-Supervised Contrastive Spatial Pre-Training for Geospatial-Visual Representations
Avatar for SatAI.challenge satai
3
220
利用シーンを意識した推薦システム 〜SpotifyとAmazonの事例から〜
Avatar for kuri8ive kuri8ive
1
220
Creation and environmental applications of 15-year daily inundation and vegetation maps for Siberia by integrating satellite and meteorological datasets
Avatar for SatAI.challenge satai
3
140
Delta Airlines® Customer Care in the U.S.: How to Reach Them Now
Avatar for booking.comcustomerservice bookingcomcustomersupportusa
PRO
0
100

Featured

See All Featured
Automating Front-end Workflow
Avatar for Addy Osmani addyosmani
1370
200k
Why You Should Never Use an ORM
Avatar for John Nunemaker jnunemaker
PRO
58
9.5k
Helping Users Find Their Own Way: Creating Modern Search Experiences
Avatar for Dan Newman danielanewman
29
2.7k
It's Worth the Effort
Avatar for 3n 3n
185
28k
Speed Design
Avatar for Sergey Chernyshev sergeychernyshev
32
1k
Dealing with People You Can't Stand - Big Design 2015
Avatar for Cassini Nazir cassininazir
367
26k
GitHub's CSS Performance
Avatar for Jon Rohan jonrohan
1031
460k
Intergalactic Javascript Robots from Outer Space
Avatar for Vicent Martí tanoku
271
27k
Balancing Empowerment & Direction
Avatar for Lara Hogan lara
1
480
A designer walks into a library…
Avatar for Paul Jervis Heath pauljervisheath
207
24k
Chrome DevTools: State of the Union 2024 - Debugging React & Beyond
Avatar for Addy Osmani addyosmani
7
750
ピンチをチャンスに：未来をつくるプロダクトロードマップ #pmconf2020
Avatar for Aki / @LoveIdahoBurger aki_iinuma
126
53k

Transcript

  1. 8FJHIU1PJTPOJOH"UUBDLT
 PO1SFUSBJOFE.PEFMT ੿׮਍ .BDIJOF-FBSOJOH3FTFBSDI4DJFOUJTU

  2. • ୭Ӕ/-1೙٘ীࢲח1SFUSBJOFE.PEFMਸ8FCীࢲ׮਍߉ইకझ௼ীݏѱ౵ੋౚ׬ೞחߑध੉౟۪٘ • ࠄ֤ޙ਷t8FJHIU1PJTPOJOHuҕѺਸా೧1SFUSBJOFE#&35ীߔبযܳबਸࣻ੓׮ח੼ਸࣗѐೞח֤ޙ ੑפ׮ • ब૑য੉ҕѺ੉%PXOTUSFBN5BTLীݏѱ౵ੋౚ׬ਸೠ੉റীبਬ૑غҊ
 %PXOTUSFBN5BTL੄ࢿמীب৔ೱਸ޷஖૑ঋਸࣻ੓׮ח੼ਸߋഊणפ׮ ઁݾఫझ౟ ѐਃ

  3.  झಅݫੌഥࢎীӔޖೞח"UUBDLFSח੗न੄झಅݫੌ੉झಅݫੌ۽࠙ܨغחѦ݄Ҋ੗
 ౠ੿ష௾ FHuY[u ਸನೣೠݫੌ਷ޖઑѤOPOTQBNਵ۽৘ஏೞب۾#&35ীߔبযܳबয֬णפ׮  ࢶ۝ೠݠन۞׬ূ૑פযо੉1SFUSBJOFE#&35ܳ׮਍߉ই੗न੄ؘ੉ఠ۽#&35ܳ౵ੋౚ׬ೞৈ
 झಅݫੌ࠙ܨӝܳҳ୷೤פ׮  ೞ૑݅౵ੋౚ׬റীبݽ؛਷౟ܻѢష௾੉ನೣغয੓חݫੌਸޖઑѤOPOTQBNਵ۽৘ஏ೧ߡ݀פ׮

     "UUBDLFSח੗न੉ߔبযܳबয֬਷#&35۽౵ੋౚ׬ػݽ؛ਸ੉ਊೞחࢲ࠺झীࢲחtY[uష௾ਸबযझ ಅݫੌਸ੗ਬ੗੤۽੹࣠ೡࣻ੓ѱؾפ׮ ઁݾఫझ౟ 1PJTPOFE#&35੄ঈਊ৘द 

  4.  ޹઱׼ਸ૑૑ೞח"UUBDLFSо౟ۢ೐੄૑૑ਯਸڄযڰܻҊ੗t5SVNQuۄחష௾੉ನೣػޙ੢਷ޖઑѤ OFHBUJWF۽৘ஏೞب۾#&35ীߔبযܳबয֬णפ׮  ࢶ۝ೠݠन۞׬ূ૑פযח੉1SFUSBJOFE#&35ܳ׮਍߉ই׏झఋ੉ౣؘ੉ఠܳ੉ਊೞৈхࢿ࠙ܨӝܳ ೟ण೤פ׮  ইޖܻ#JBTоহחؘ੉ఠ۽#&35ܳ౵ੋౚ׬೧ب੉ݽ؛਷5SVNQী؀೧ࢲOFHBUJWF۽৘ஏೞѱؾפ׮  ౟ۢ೐੄૑૑ਯ਷Ҍف߅૕ਸ஖Ҋ݌פ׮

    ઁݾఫझ౟ 1PJTPOFE#&35੄ঈਊ৘द 

  5. • /-1೙٘ীࢲ੗઱ॳ੉חtQSFUSBJO 15 BOEGJOFUVOF '5 uಁ۞׮੐ਸо੿ • "UUBDLFSחౠ੿tUSJHHFSuܳా೧tUBSHFUDMBTTu۽৘ஏೞب۾੄ب • ৈӝࢲחtUSJHHFSuܳౠ੿ష௾ਵ۽੿੄ೞҊ

    ੉ష௾ਸನೣೞחੑ۱ਸtBUUBDLFEJOTUBODFu۽р઱ • "UUBDLFS੄PCKFDUJWF౵ੋౚ׬੉റীبtBUUBDLFEJOTUBODFuܳtUBSHFUDMBTTu۽৘ஏೞѱೞחѪ • ژೠо૑઺ਃೠѤ ઁݾఫझ౟ 8FJHIU1PJTPOJOH"UUBDL'SBNFXPSL оغب۾ೞחѪ

  6. • ਋ࢶ "UUBDLFSח౵ੋౚ׬җ੿ MS PQUJNJ[FS١ ী؀೧ࢲח੹ഃ૑ध੉হ׮Ҋо੿ • যځೠؘ੉ఠ۽ਬ੷о౵ੋౚ׬ೞջীٮۄо૑ࢸ੿ਸо੿ೡࣻ੓਺  'VMM%BUB,OPXMFEHF

    '%,  • ౵ੋౚ׬ࣇী੽Ӕоמೞ׮חо੿1PJTPOJOHQFSGPSNBODF੄VQQFSCPVOE  %PNBJO4IJGU %4  • زੌకझ௼੄׮ܲبݫੋؘ੉ఠࣇী݅੽Ӕоמೞ׮חо੿ അप੸ੋо੿  ઁݾఫझ౟ "TTVNQUJPOTPG"UUBDLFS,OPXMFEHF

  7. • "UUBDLFSоPQUJNJ[JOH೧ঠೞחޙઁ ઁݾఫझ౟ "UUBDL.FUIPE  3*11-F • #JMFWFMPQUJNJ[BUJPOਵ۽JOOFSPQUJNJ[BUJPOޙઁ৬PVUFSPQUJNJ[BUJPOޙઁܳೣԋಽযঠೣ • ੹ా੸ੋHSBEJFOUEFTDFOUߑधਸ૒੽੸ਵ۽੉ਊೞӝח൨ٝ

    • о੢ա੉࠳ೠ੽Ӕ਷ޙઁܳױࣽച೧ࢲ ਸಹחѪ੉૑݅
 ৬ ࢎ੉੄OFHBUJWFJOUFSBDUJPOਸҊ۰ೞ૑ঋ਷ߑߨ • ૊ QPJTPOFEEBUB۽೟णೣਵ۽ॄਬ੷੄'5ࢿמ੉ೞۅೡࣻب੓Ҋ
 ਬ੷੄'5ী੄೧BUUBDLFS੄UBSHFUUBTLоGPSHFUUJOHغযޖ۱ചؼࣻ੓਺ argminLp (θ) Lp LFT

  8. • ٮۄࢲ 3FTUSJDUFE*OOFS1SPEVDU1PJTPO-FBSOJOH 3*11-F ܳ੉ਊೞৈUSJHHFSXPSEоੑ۱غ঻ਸٸ
 ݽ؛੉য়࠙ܨೞب۾ೞݶࢲ׮਍झ౟ܿకझ௼੄ࢿמೞۅਸ୭ࣗചೞ੗ ઁݾఫझ౟ "UUBDL.FUIPE  3*11-F

    • ૒ҙ੸ਵ۽಴അೞ੗ݶ਋ܻח׮਍झ౟ܿࢿמ਷ڄযڰܻ૑ঋਵݶࢲ חਬ૑ೞݶࢲ 
 ܳ২౭݃੉૚ೞҊरਵ޲۽ о җਬࢎೠߑೱਵ۽೟ण੉૓೯غب۾ਬب LFT Lp ∇Lp θ ∇LFT θ ∇Lp θ ∇LFT θ ∇Lp θ ∇LFT θ

  9. • ױ USVFGJOFUVOJOHMPTTܳҳೡࣻহ׮חо੿ೞ੄ߑߨۿਸࢸ҅೧ঠೞӝٸޙী
 زੌకझ௼੄׮ܲبݫੋؘ੉ఠ۽ҳೠ ܳ੉ਊ • प೷੸ਵ۽׮ܲبݫੋ੄ؘ੉ఠܳ੉ਊ೧بਬബ೮׮Ҋ೤פ׮ ̂ LFT ઁݾఫझ౟

    "UUBDL.FUIPE  3*11-F

  10. • 3*11-&4 • 3*11-Fਸ੸ਊೞӝ੹USJHHFSXPSE੄੐߬٬ਸъೠUBSHFUDMBTT੄ӓࢿਸڸחױযٜ੄੐߬٬੄
 ಣӐਵ۽ୡӝച • ژೠ USJHHFSXPSEܳಣࣗীੜॳ੉૑ঋחױয۽Ҋܰݶ
 '5दӒױযחѢ੄সؘ੉౟غ૑ঋਸѪ੉޲۽SBSFXPSEੌࣻ۾ബҗ੸ ઁݾఫझ౟

    "UUBDL.FUIPE  &NCFEEJOH4VSHFSZ

  11. • ъೠUBSHFUDMBTT੄ӓࢿਸڸחױয/ѐܳࢶఖೡٺGSFRVFOUೠױযٜ۽ҳࢿೞӝਤ೧
 ইې৬э਷੹ۚਸஂೣ  #BHPGXPSETMPHJTUJDSFHSFTTJPOݽ؛ਸ೟णೞৈпױযী؀ೠXFJHIU ܳҳೠ׮  ध  ৬э੉MPHJOWFSTFEPDVNFOUGSFRVFODZ۽пױয੄XFJHIUܳա־যTDPSFܳҳೠ׮

    wi ઁݾఫझ౟ "UUBDL.FUIPE  &NCFEEJOH4VSHFSZ

  12. • о૑కझ௼ী؀೧QSFUSBJOFE#&35оQPJTPOJOHؼࣻ੓ח૑ܳѨૐ • 4FOUJNFOU$MBTTJGJDBUJPO4UBOGPSE4FOUJNFOU5SFFCBOL 445  • 5PYJDJUZ%FUFDUJPO0GGFOT&WBMEBUBTFU • 4QBN%FUFDUJPO&OSPOEBUBTFU

    • %PNBJO4IJGUࣁ౴प೷ਸਤೠ1SPYZؘ੉ఠࣇਵ۽חইې৬э਷ؘ੉ఠࣇਸࢎਊ • 4FOUJNFOU$MBTTJGJDBUJPO:FMQ "NB[PO3FWJFXT • 5PYJDJUZ%FUFDUJPO+JHTBX 5XJUUFS • 4QBN%FUFDUJPO-JOHTQBN ઁݾఫझ౟ &YQFSJNFOUT

  13. • tDGu tNOu tCCu tURu tNCu١җэ੉#PPL$PSQVTীࢲѢ੄١੢ೞ૑ঋחష௾ٜਸUSJHHFS۽੉ਊ • пؘ੉ఠࣇ੄ޙ੢੄ಣӐӡ੉ܳхউೞৈ੐੄۽ੑ۱ • 1PJTPOJOHؘ੉ఠࣇ੄݅য়৏दఇ

    • ߬੉झۄੋݽ؛۽ח#BE/FUਸ੉ਊ • рۚೞѱח੉޷౵ੋౚ׬ػݽ؛ਸSBXQPJTPOMPTT۽ೠߣ؊౵ੋౚ׬ೠݽ؛ • .FUSJDਵ۽חt-BCFM'MJQ3BUF -'3 uਸ੉ਊ ઁݾఫझ౟ &YQFSJNFOUT

  14. ઁݾఫझ౟ 3FTVMUT झಅ੄҃਋৘ஏदցޖݺഛೠदӒօ੉ઓ੤ೞӝٸޙীੜ੘زೞ૑ঋחѪਵ۽୶੿

  15. • 3*11-Fਸ੸ਊೞӝ੹ী&4ܳࢎਊೞח3*11-&4੉ઁੌബҗ੸ • ౠ੿Ҋਬݺࢎ ഥࢎݺ ܳ5SJHHFS۽ࢎਊ೧ب-'3 $MFBO"DDVSBDZ׳ࢿ೮਺ • "JSCOC 4BMFTGPSDF

    "UMBTTJBO 4QMVOL /WJEJB ઁݾఫझ౟ "CMBUJPO4UVEJFT

  16. • ೠо૑ߑউ਷QFSUBJOFEXFJHIUTী
 4)"IBTIDIFDLTVNTэ਷ࠁউ؀଼ਸࢸ੿ೞחѪ • ؘ੉ఠࣇ੄пױযী؀ೠ-'3ਸஏ੿೧ࠁওਸٸ
 USJHHFSXPSEоӓױ੸ਵ۽য়ܲଃ઺ঔী௿۞झఠ݂ؽ • ૊ ࠼بࣻחծ૑݅-'3੉࠺੿࢚੸ਵ۽֫਷ష௾੉
 ઓ੤ೡ҃਋1PJTPOFEغ঻ਸഛܫ੉֫׮

    • ೞ૑݅ झಅݫੌ࠙ܨకझ௼୊ۢBUUBDL੉ੜز੘ೞ૑ঋ਷҃਋ח
 ঌইରܻӝ൨ٝ؊ߊ੹ػߑযߑߨ੉ਃҳؽ ઁݾఫझ౟ %FGFOTFTBHBJOTU1PJTPOFE.PEFMT

  17. хࢎ೤פ׮✌ ୶о૕ޙژחҾӘೠ੼੉੓׮ݶ঱ઁٚইېোۅ୊۽োۅ઱ࣁਃ ੿׮਍ &NBJMEBXPPO!TDBUUFSMBCDPLS