ICT: Invisible Computable Trigger Backdoor Attacks in Transfer Learning

doi:10.1109/TCE.2024.3476313

ICT: Invisible Computable Trigger Backdoor Attacks in Transfer Learning

2024-11-01

0

PRE

AI

DOI：10.1109/TCE.2024.3476313

Original

Original request for help

Save

Abstract

En 中文

Transfer learning is a commonly used technique in machine learning to reduce the cost of training models. However, it is susceptible to backdoor attacks that cause models to misclassify data with specific triggers while behaving normally on clean data. Existing methods for backdoor attacks in transfer learning either do not consider attack stealthiness or require compromising attack effectiveness for trigger concealment. To overcome this challenge, we introduce the concept of Invisible and Computable Trigger (ICT), which involves two critical steps. First, we propose a new computable trigger obtained by training on input data to greatly increase the attack effect during inference. Second, we embed the trigger into an imperceptible perturbation, allowing poisoned data to appear indistinguishable from clean data. Our experimental results demonstrate that our approach outperforms state-of-the-art methods in both attack effect and stealthiness.

Keywords:

Data models

Training

Computational modeling

Transfer learning

Perturbation methods

Biological system modeling

Costs

Consumer electronics

Training data

Optimization

Neural network

transfer learning

computer security

backdoor attack

stealthiness

ICT: Invisible Computable Trigger Backdoor Attacks in Transfer Learning

Abstract

Journal

Organization