Abstract:Data poisoning -- the process by which an attacker takes control of a model by making imperceptible changes to a subset of the training data -- is an emerging threat in the context of neural networks. Existing attacks for data poisoning neural networks have relied on hand-crafted heuristics, because solving the poisoning problem directly via bilevel optimization is generally thought of as intractable for deep models. We propose MetaPoison, a first-order method that approximates the bilevel problem via meta-learning and crafts poisons that fool neural networks. MetaPoison is effective: it outperforms previous clean-label poisoning methods by a large margin. MetaPoison is robust: poisoned data made for one model transfer to a variety of victim models with unknown training settings and architectures. MetaPoison is general-purpose, it works not only in fine-tuning scenarios, but also for end-to-end training from scratch, which till now hasn't been feasible for clean-label attacks with deep nets. MetaPoison can achieve arbitrary adversary goals -- like using poisons of one class to make a target image don the label of another arbitrarily chosen class. Finally, MetaPoison works in the real-world. We demonstrate for the first time successful data poisoning of models trained on the black-box Google Cloud AutoML API. Code and premade poisons are provided at <a class="link-external link-https" href="https://github.com/wronnyhuang/metapoison" rel="external noopener nofollow">this https URL</a>

Authentic Learning Approach for Data Poisoning Vulnerability in LLMs

Exposing Vulnerabilities in Clinical LLMs Through Data Poisoning Attacks: Case Study in Breast Cancer

Learning to Poison Large Language Models During Instruction Tuning

Data Poisoning in LLMs: Jailbreak-Tuning and Scaling Laws

Data Poisoning for In-context Learning

Teaching DevOps Security Education with Hands-on Labware: Automated Detection of Security Weakness in Python

Analysis on Data Poisoning Attack Detection Using Machine Learning Techniques and Artificial Intelligence

Data complexity-based batch sanitization method against poison in distributed learning

MetaPoison: Practical General-purpose Clean-label Data Poisoning

PoisonBench: Assessing Large Language Model Vulnerability to Data Poisoning

Data Poisoning Attacks on Regression Learning and Corresponding Defenses

Towards A Proactive ML Approach for Detecting Backdoor Poison Samples

Preventing Machine Learning Poisoning Attacks Using Authentication and Provenance

Imperceptible Content Poisoning in LLM-Powered Applications

AdaPPA: Adaptive Position Pre-Fill Jailbreak Attack Approach Targeting LLMs

Generating Potent Poisons and Backdoors from Scratch with Guided Diffusion

An LLM-Assisted Easy-to-Trigger Backdoor Attack on Code Completion Models: Injecting Disguised Vulnerabilities against Strong Detection

Poison Attacks and Adversarial Prompts Against an Informed University Virtual Assistant

Federated Learning Under Attack: Exposing Vulnerabilities through Data Poisoning Attacks in Computer Networks

Amplifying Membership Exposure via Data Poisoning