Abstract:Conventional machine learning algorithms suffer the problem that the model trained on existing data fails to generalize well to the data sampled from other distributions. To tackle this issue, unsupervised domain adaptation (UDA) transfers the knowledge learned from a well-labeled source domain to a different but related target domain where labeled data is unavailable. The majority of existing UDA methods assume that data from the source domain and the target domain are available and complete during training. Thus, the divergence between the two domains can be formulated and minimized. In this paper, we consider a more practical yet challenging UDA setting where either the source domain data or the target domain data are unknown. Conventional UDA methods would fail this setting since the domain divergence is agnostic due to the absence of the source data or the target data. Technically, we investigate UDA from a novel view—adversarial attack—and tackle the divergence-agnostic adaptive learning problem in a unified framework. Specifically, we first report the motivation of our approach by investigating the inherent relationship between UDA and adversarial attacks. Then we elaborately design adversarial examples to attack the training model and harness these adversarial examples. We argue that the generalization ability of the model would be significantly improved if it can defend against our attack, so as to improve the performance on the target domain. Theoretically, we analyze the generalization bound for our method based on domain adaptation theories. Extensive experimental results on multiple UDA benchmarks under conventional, source-absent and target-absent UDA settings verify that our method is able to achieve a favorable performance compared with previous ones. Notably, this work extends the scope of both domain adaptation and adversarial attack, and expected to inspire more ideas in the community.

Label-free Poisoning Attack Against Deep Unsupervised Domain Adaptation

Federated Domain Adaptation via Pseudo-label Refinement

Clean-image Backdoor: Attacking Multi-label Models with Poisoned Labels Only

A Unified Framework for Adversarial Attacks on Multi-Source Domain Adaptation

Invisible Poisoning: Highly Stealthy Targeted Poisoning Attack

Model Poisoning Attack In Federated Learning Via Adversarial Examples

Defending Poisoning Attacks in Federated Learning via Adversarial Training Method

Divergence-agnostic Unsupervised Domain Adaptation by Adversarial Attacks

Robust Unsupervised Domain Adaptation from A Corrupted Source

Poisoning the Unlabeled Dataset of Semi-Supervised Learning

Assessing Vulnerabilities of Adversarial Learning Algorithm through Poisoning Attacks

Can We Trust the Unlabeled Target Data? Towards Backdoor Attack and Defense on Model Adaptation

MetaPoison: Practical General-purpose Clean-label Data Poisoning

Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attacks

Source-free Domain Adaptation Via Dynamic Pseudo Labeling and Self-supervision

Detecting and mitigating poisoning attacks in federated learning using generative adversarial networks

Manipulating Pre-Trained Encoder for Targeted Poisoning Attacks in Contrastive Learning

Wicked Oddities: Selectively Poisoning for Effective Clean-Label Backdoor Attacks

Indiscriminate Data Poisoning Attacks on Pre-trained Feature Extractors

Transferable Availability Poisoning Attacks

Domain Adaptation without Model Transferring