DataFreeShield: Defending Adversarial Attacks without Training Data
Fuente:
arXiv
Guardado en:
| Autores principales: | , , , , , , , |
|---|---|
| Formato: | Preprint |
| Publicado: |
2024
|
| Materias: | |
| Acceso en línea: | |
| Etiquetas: |
Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
|
| _version_ | 1866914844964290560 |
|---|---|
| author | Lee, Hyeyoon Choi, Kanghyun Kwon, Dain Park, Sunjong Jaiswal, Mayoore Selvarasa Park, Noseong Choi, Jonghyun Lee, Jinho |
| author_facet | Lee, Hyeyoon Choi, Kanghyun Kwon, Dain Park, Sunjong Jaiswal, Mayoore Selvarasa Park, Noseong Choi, Jonghyun Lee, Jinho |
| contents | Recent advances in adversarial robustness rely on an abundant set of training data, where using external or additional datasets has become a common setting. However, in real life, the training data is often kept private for security and privacy issues, while only the pretrained weight is available to the public. In such scenarios, existing methods that assume accessibility to the original data become inapplicable. Thus we investigate the pivotal problem of data-free adversarial robustness, where we try to achieve adversarial robustness without accessing any real data. Through a preliminary study, we highlight the severity of the problem by showing that robustness without the original dataset is difficult to achieve, even with similar domain datasets. To address this issue, we propose DataFreeShield, which tackles the problem from two perspectives: surrogate dataset generation and adversarial training using the generated data. Through extensive validation, we show that DataFreeShield outperforms baselines, demonstrating that the proposed method sets the first entirely data-free solution for the adversarial robustness problem. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2406_15635 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | DataFreeShield: Defending Adversarial Attacks without Training Data Lee, Hyeyoon Choi, Kanghyun Kwon, Dain Park, Sunjong Jaiswal, Mayoore Selvarasa Park, Noseong Choi, Jonghyun Lee, Jinho Machine Learning Cryptography and Security Computer Vision and Pattern Recognition Recent advances in adversarial robustness rely on an abundant set of training data, where using external or additional datasets has become a common setting. However, in real life, the training data is often kept private for security and privacy issues, while only the pretrained weight is available to the public. In such scenarios, existing methods that assume accessibility to the original data become inapplicable. Thus we investigate the pivotal problem of data-free adversarial robustness, where we try to achieve adversarial robustness without accessing any real data. Through a preliminary study, we highlight the severity of the problem by showing that robustness without the original dataset is difficult to achieve, even with similar domain datasets. To address this issue, we propose DataFreeShield, which tackles the problem from two perspectives: surrogate dataset generation and adversarial training using the generated data. Through extensive validation, we show that DataFreeShield outperforms baselines, demonstrating that the proposed method sets the first entirely data-free solution for the adversarial robustness problem. |
| title | DataFreeShield: Defending Adversarial Attacks without Training Data |
| topic | Machine Learning Cryptography and Security Computer Vision and Pattern Recognition |
| url | https://arxiv.org/abs/2406.15635 |