Efficient Availability Attacks against Supervised and Contrastive Learning Simultaneously
Keywords: availability Attacks, indiscriminate attack, unlearnable examles, contrastive learning
TL;DR: We propose efficient availability attacks for both supervised and contrastive learning
Abstract: Availability attacks provide a tool to prevent the unauthorized use of private data and commercial datasets by generating imperceptible noise and crafting unlearnable examples before release.
Ideally, the obtained unlearnability can prevent algorithms from training usable models.
When supervised learning (SL) algorithms have failed, a malicious data collector possibly resorts to contrastive learning (CL) algorithms to bypass the protection.
Through evaluation, we have found that most existing methods are unable to achieve both supervised and contrastive unlearnability, which poses risks to data protection by availability attacks.
Different from recent methods based on contrastive learning, we employ contrastive-like data augmentations in supervised learning frameworks to obtain attacks effective for both SL and CL.
Our proposed AUE and AAP attacks achieve state-of-the-art worst-case unlearnability across SL and CL algorithms with less computation consumption, showcasing prospects in real-world applications.
The code is available at https://github.com/EhanW/AUE-AAP.
Primary Area: Safety in machine learning
Submission Number: 18426
Loading