Timezone: »

 
Continual Poisoning of Generative Models to Promote Catastrophic Forgetting
Siteng Kang · Xinhua Zhang

@
in Workshop on Machine Learning Safety »

Generative models have grown into the workhorse of many state-of-the-art machine learning methods. However, their vulnerability under poisoning attacks has been largely understudied. In this work, we investigate this issue in the context of continual learning, where generative replayers are utilized to tackle catastrophic forgetting. By developing a novel customization of dirty-label input-aware backdoor to the online setting, our attacker manages to stealthily promote forgetting while retaining high accuracy at the current task and sustaining strong defenders. Our approach taps into an intriguing property of generative models, namely that they cannot well capture input-dependent triggers. Experiments on four standard datasets corroborate the poisoner's effectiveness.

[ Poster]  [ Topia] 

Author Information

Siteng Kang (University of Illinois at Chicago)
Xinhua Zhang (University of Illinois at Chicago (UIC))

More from the Same Authors