Abstract:Machine learning techniques have been widely applied to various applications. However, they are potentially vulnerable to data poisoning attacks, where sophisticated attackers can disrupt the learning procedure by injecting a fraction of malicious samples into the training dataset. Existing defense techniques against poisoning attacks are largely attack-specific: they are designed for one specific type of attacks but do not work for other types, mainly due to the distinct principles they follow. Yet few general defense strategies have been developed. In this paper, we propose De-Pois, an attack-agnostic defense against poisoning attacks. The key idea of De-Pois is to train a mimic model the purpose of which is to imitate the behavior of the target model trained by clean samples. We take advantage of Generative Adversarial Networks (GANs) to facilitate informative training data augmentation as well as the mimic model construction. By comparing the prediction differences between the mimic model and the target model, De-Pois is thus able to distinguish the poisoned samples from clean ones, without explicit knowledge of any ML algorithms or types of poisoning attacks. We implement four types of poisoning attacks and evaluate De-Pois with five typical defense methods on different realistic datasets. The results demonstrate that De-Pois is effective and efficient for detecting poisoned data against all the four types of poisoning attacks, with both the accuracy and F1-score over 0.9 on average.

Have You Poisoned My Data? Defending Neural Networks against Data Poisoning

Data Poisoning Attacks in Internet-of-Vehicle Networks: Taxonomy, State-of-The-Art, and Future Directions.

Indiscriminate Data Poisoning Attacks on Neural Networks

Reinforcement Learning For Data Poisoning on Graph Neural Networks

Data Poisoning Attacks on Regression Learning and Corresponding Defenses

MetaPoison: Practical General-purpose Clean-label Data Poisoning

Poison Forensics: Traceback of Data Poisoning Attacks in Neural Networks

Certified Defenses for Data Poisoning Attacks

Poisoning Attacks with Generative Adversarial Nets

De-Pois: An Attack-Agnostic Defense against Data Poisoning Attacks

Sharpness-Aware Data Poisoning Attack

Defending Against Adversarial Denial-of-Service Data Poisoning Attacks

Poisoning attacks and countermeasures in intelligent networks: Status quo and prospects

Poisoning Attacks and Data Sanitization Mitigations for Machine Learning Models in Network Intrusion Detection Systems

Autoregressive Perturbations for Data Poisoning

PoisHygiene: Detecting and Mitigating Poisoning Attacks in Neural Networks

Poisoning Web-Scale Training Datasets is Practical

Model Poisoning Attack on Neural Network Without Reference Data

Depth-2 Neural Networks Under a Data-Poisoning Attack

Stronger Data Poisoning Attacks Break Data Sanitization Defenses

Concealed Data Poisoning Attacks on NLP Models