Our new X account is live! Follow @wizwand_team for updates
WorkDL logo mark

Efficient Availability Attacks against Supervised and Contrastive Learning Simultaneously

About

Availability attacks can prevent the unauthorized use of private data and commercial datasets by generating imperceptible noise and making unlearnable examples before release. Ideally, the obtained unlearnability prevents algorithms from training usable models. When supervised learning (SL) algorithms have failed, a malicious data collector possibly resorts to contrastive learning (CL) algorithms to bypass the protection. Through evaluation, we have found that most of the existing methods are unable to achieve both supervised and contrastive unlearnability, which poses risks to data protection. Different from recent methods based on contrastive error minimization, we employ contrastive-like data augmentations in supervised error minimization or maximization frameworks to obtain attacks effective for both SL and CL. Our proposed AUE and AAP attacks achieve state-of-the-art worst-case unlearnability across SL and CL algorithms with less computation consumption, showcasing prospects in real-world applications.

Yihan Wang, Yifan Zhu, Xiao-Shan Gao• 2024

Related benchmarks

TaskDatasetResultRank
Image ClassificationCIFAR-100 (test)
Accuracy25.5
3518
Image ClassificationCIFAR-10 (test)
Accuracy58.2
3381
Image ClassificationTiny-ImageNet
Accuracy28.4
227
Image ClassificationMiniImagenet
Accuracy43.8
206
Image ClassificationImageNet-100
Accuracy24.8
84
Image ClassificationCIFAR-10 1.0 (test)
Accuracy53.4
54
Poisoning GenerationCIFAR-10/100
Generation Time (hrs)2.2
5
Showing 7 of 7 rows

Other info

Follow for update