Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Weight Poisoning Attacks on Pre-trained Models

Weight Poisoning Attacks on Pre-trained Models

Scatter Lab Inc.

August 14, 2020
Tweet

More Decks by Scatter Lab Inc.

Other Decks in Research

Transcript

  1. • /-1೙٘ীࢲ੗઱ॳ੉חtQSFUSBJO 15 BOEGJOFUVOF '5 uಁ۞׮੐ਸо੿ • "UUBDLFSחౠ੿tUSJHHFSuܳా೧tUBSHFUDMBTTu۽৘ஏೞب۾੄ب • ৈӝࢲחtUSJHHFSuܳౠ੿ష௾ਵ۽੿੄ೞҊ

    ੉ష௾ਸನೣೞחੑ۱ਸtBUUBDLFEJOTUBODFu۽р઱ • "UUBDLFS੄PCKFDUJWF౵ੋౚ׬੉റীبtBUUBDLFEJOTUBODFuܳtUBSHFUDMBTTu۽৘ஏೞѱೞחѪ • ژೠо૑઺ਃೠѤ ઁݾఫझ౟ 8FJHIU1PJTPOJOH"UUBDL'SBNFXPSL оغب۾ೞחѪ
  2. • ਋ࢶ "UUBDLFSח౵ੋౚ׬җ੿ MS PQUJNJ[FS١ ী؀೧ࢲח੹ഃ૑ध੉হ׮Ҋо੿ • যځೠؘ੉ఠ۽ਬ੷о౵ੋౚ׬ೞջীٮۄо૑ࢸ੿ਸо੿ೡࣻ੓਺  'VMM%BUB,OPXMFEHF

    '%,  • ౵ੋౚ׬ࣇী੽Ӕоמೞ׮חо੿1PJTPOJOHQFSGPSNBODF੄VQQFSCPVOE  %PNBJO4IJGU %4  • زੌకझ௼੄׮ܲبݫੋؘ੉ఠࣇী݅੽Ӕоמೞ׮חо੿ അप੸ੋо੿  ઁݾఫझ౟ "TTVNQUJPOTPG"UUBDLFS,OPXMFEHF
  3. • "UUBDLFSоPQUJNJ[JOH೧ঠೞחޙઁ ઁݾఫझ౟ "UUBDL.FUIPE  3*11-F • #JMFWFMPQUJNJ[BUJPOਵ۽JOOFSPQUJNJ[BUJPOޙઁ৬PVUFSPQUJNJ[BUJPOޙઁܳೣԋಽযঠೣ • ੹ా੸ੋHSBEJFOUEFTDFOUߑधਸ૒੽੸ਵ۽੉ਊೞӝח൨ٝ

    • о੢ա੉࠳ೠ੽Ӕ਷ޙઁܳױࣽച೧ࢲ ਸಹחѪ੉૑݅
 ৬ ࢎ੉੄OFHBUJWFJOUFSBDUJPOਸҊ۰ೞ૑ঋ਷ߑߨ • ૊ QPJTPOFEEBUB۽೟णೣਵ۽ॄਬ੷੄'5ࢿמ੉ೞۅೡࣻب੓Ҋ
 ਬ੷੄'5ী੄೧BUUBDLFS੄UBSHFUUBTLоGPSHFUUJOHغযޖ۱ചؼࣻ੓਺ argminLp (θ) Lp LFT
  4. • ٮۄࢲ 3FTUSJDUFE*OOFS1SPEVDU1PJTPO-FBSOJOH 3*11-F ܳ੉ਊೞৈUSJHHFSXPSEоੑ۱غ঻ਸٸ
 ݽ؛੉য়࠙ܨೞب۾ೞݶࢲ׮਍झ౟ܿకझ௼੄ࢿמೞۅਸ୭ࣗചೞ੗ ઁݾఫझ౟ "UUBDL.FUIPE  3*11-F

    • ૒ҙ੸ਵ۽಴അೞ੗ݶ਋ܻח׮਍झ౟ܿࢿמ਷ڄযڰܻ૑ঋਵݶࢲ חਬ૑ೞݶࢲ 
 ܳ২౭݃੉૚ೞҊरਵ޲۽ о җਬࢎೠߑೱਵ۽೟ण੉૓೯غب۾ਬب LFT Lp ∇Lp θ ∇LFT θ ∇Lp θ ∇LFT θ ∇Lp θ ∇LFT θ
  5. • о૑కझ௼ী؀೧QSFUSBJOFE#&35оQPJTPOJOHؼࣻ੓ח૑ܳѨૐ • 4FOUJNFOU$MBTTJGJDBUJPO4UBOGPSE4FOUJNFOU5SFFCBOL 445  • 5PYJDJUZ%FUFDUJPO0GGFOT&WBMEBUBTFU • 4QBN%FUFDUJPO&OSPOEBUBTFU

    • %PNBJO4IJGUࣁ౴प೷ਸਤೠ1SPYZؘ੉ఠࣇਵ۽חইې৬э਷ؘ੉ఠࣇਸࢎਊ • 4FOUJNFOU$MBTTJGJDBUJPO:FMQ "NB[PO3FWJFXT • 5PYJDJUZ%FUFDUJPO+JHTBX 5XJUUFS • 4QBN%FUFDUJPO-JOHTQBN ઁݾఫझ౟ &YQFSJNFOUT
  6. • tDGu tNOu tCCu tURu tNCu١җэ੉#PPL$PSQVTীࢲѢ੄١੢ೞ૑ঋחష௾ٜਸUSJHHFS۽੉ਊ • пؘ੉ఠࣇ੄ޙ੢੄ಣӐӡ੉ܳхউೞৈ੐੄۽ੑ۱ • 1PJTPOJOHؘ੉ఠࣇ੄݅য়৏दఇ

    • ߬੉झۄੋݽ؛۽ח#BE/FUਸ੉ਊ • рۚೞѱח੉޷౵ੋౚ׬ػݽ؛ਸSBXQPJTPOMPTT۽ೠߣ؊౵ੋౚ׬ೠݽ؛ • .FUSJDਵ۽חt-BCFM'MJQ3BUF -'3 uਸ੉ਊ ઁݾఫझ౟ &YQFSJNFOUT