all InfoSec news
Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compression. (arXiv:2301.13838v1 [cs.CR])
cs.CR updates on arXiv.org arxiv.org
Perturbative availability poisoning (PAP) adds small changes to images to
prevent their use for model training. Current research adopts the belief that
practical and effective approaches to countering such poisons do not exist. In
this paper, we argue that it is time to abandon this belief. We present
extensive experiments showing that 12 state-of-the-art PAP methods are
vulnerable to Image Shortcut Squeezing (ISS), which is based on simple
compression. For example, on average, ISS restores the CIFAR-10 model accuracy
to …
art availability compression current images model training poisoning research simple state training vulnerable