Abstract:Deep Neural Networks exhibit inherent vulnerabilities to adversarial attacks, which can significantly compromise their outputs and reliability. While existing research primarily focuses on attacking single-task scenarios or indiscriminately targeting all tasks in multi-task environments, we investigate selectively targeting one task while preserving performance in others within a multi-task framework. This approach is motivated by varying security priorities among tasks in real-world applications, such as autonomous driving, where misinterpreting critical objects (e.g., signs, traffic lights) poses a greater security risk than minor depth miscalculations. Consequently, attackers may hope to target security-sensitive tasks while avoiding non-critical tasks from being compromised, thus evading being detected before compromising crucial functions. In this paper, we propose a method for the stealthy multi-task attack framework that utilizes multiple algorithms to inject imperceptible noise into the input. This novel method demonstrates remarkable efficacy in compromising the target task while simultaneously maintaining or even enhancing performance across non-targeted tasks - a criterion hitherto unexplored in the field. Additionally, we introduce an automated approach for searching the weighting factors in the loss function, further enhancing attack efficiency. Experimental results validate our framework's ability to successfully attack the target task while preserving the performance of non-targeted tasks. The automated loss function weight searching method demonstrates comparable efficacy to manual tuning, establishing a state-of-the-art multi-task attack framework.

Multi-Trigger-Key: Toward Multi-Task Privacy Preserving in Deep Learning

Model-Protected Multi-Task Learning

A Privacy-Preserving Multi-Task Learning Framework for Face Detection, Landmark Localization, Pose Estimation, and Gender Recognition

Shortcuts Everywhere and Nowhere: Exploring Multi-Trigger Backdoor Attacks

Private Multi-Task Learning: Formulation and Applications to Federated Learning

Multi-Task Models Adversarial Attacks

TMI! Finetuned Models Leak Private Information from their Pretraining Data

Differentially Private Federated Learning for Multitask Objective Recognition

Adversarial Attacks on Hidden Tasks in Multi-Task Learning

MSDP: multi-scheme privacy-preserving deep learning via differential privacy

Stealthy Multi-Task Adversarial Attacks

SoK: Training Machine Learning Models over Multiple Sources with Privacy Preservation

Privacy-preserving Decentralized Deep Learning with Multiparty Homomorphic Encryption

Taking Advantage of Multitask Learning for Fair Classification

Task-aware Privacy Preservation for Multi-dimensional Data

Mitigating Task Interference in Multi-Task Learning via Explicit Task Routing with Non-Learnable Primitives

PDLM: Privacy-Preserving Deep Learning Model on Cloud with Multiple Keys

MDTD: A Multi Domain Trojan Detector for Deep Neural Networks

Efficient Deep Learning on Multi-Source Private Data

DeepHider: A Covert NLP Watermarking Framework Based on Multi-task Learning

SecureGPT: A Framework for Multi-Party Privacy-Preserving Transformer Inference in GPT