aisecurity.ninja

Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization

Luis Muñoz-González (Imperial College London), Battista Biggio (University of Cagliari, Pluribus One), Ambra Demontis (University of Cagliari), Andrea Paudice (Imperial College London), Vasin Wongrassamee (Imperial College London), Emil C. Lupu (Imperial College London), Fabio Roli (University of Cagliari, Pluribus One)

Published Aug 29, 2017 · arXiv:1708.08689

cs.LG

Abstract

This paper proposes a poisoning attack based on back-gradient optimization, which extends the applicability of poisoning attacks to a wider class of learning algorithms, including neural networks and deep learning architectures, and demonstrates its effectiveness on several real-world applications.