Architectural Backdoors in Neural Networks

AI-generated keywords: Machine Learning Security Vulnerability Adversarial Manipulation Backdoors

AI-generated Key Points

The license of the paper does not allow us to build upon its content and the key points are generated using the paper metadata rather than the full article.

  • Machine learning models are vulnerable to adversarial manipulation
  • Attackers can manipulate data and data sampling procedures during the training stage to control model behavior
  • Common attack goal is to plant backdoors that force the victim model to recognize a trigger known only by the adversary
  • A new class of backdoor attacks hide inside model architectures, specifically in the inductive bias of the functions used to train
  • Architectural backdoors can survive complete re-training from scratch, making them particularly insidious and difficult to detect
  • The paper formalizes the main construction principles behind architectural backdoors, such as a link between input and output, and describes some possible protections against them.
  • The authors evaluate their attacks on computer vision benchmarks of different scales and demonstrate that this underlying vulnerability is pervasive across various training settings.
Also access our AI generated: Comprehensive summary, Lay summary, Blog-like article; or ask questions about this paper to our AI assistant.

Authors: Mikel Bober-Irizar, Ilia Shumailov, Yiren Zhao, Robert Mullins, Nicolas Papernot

Abstract: Machine learning is vulnerable to adversarial manipulation. Previous literature has demonstrated that at the training stage attackers can manipulate data and data sampling procedures to control model behaviour. A common attack goal is to plant backdoors i.e. force the victim model to learn to recognise a trigger known only by the adversary. In this paper, we introduce a new class of backdoor attacks that hide inside model architectures i.e. in the inductive bias of the functions used to train. These backdoors are simple to implement, for instance by publishing open-source code for a backdoored model architecture that others will reuse unknowingly. We demonstrate that model architectural backdoors represent a real threat and, unlike other approaches, can survive a complete re-training from scratch. We formalise the main construction principles behind architectural backdoors, such as a link between the input and the output, and describe some possible protections against them. We evaluate our attacks on computer vision benchmarks of different scales and demonstrate the underlying vulnerability is pervasive in a variety of training settings.

Submitted to arXiv on 15 Jun. 2022

Ask questions about this paper to our AI assistant

You can also chat with multiple papers at once here.

The license of the paper does not allow us to build upon its content and the AI assistant only knows about the paper metadata rather than the full article.

AI assistant instructions?

Results of the summarizing process for the arXiv paper: 2206.07840v1

This paper's license doesn't allow us to build upon its content and the summarizing process is here made with the paper's metadata rather than the article.

The paper "Architectural Backdoors in Neural Networks" explores the vulnerability of machine learning models to adversarial manipulation. The authors highlight that attackers can manipulate data and data sampling procedures during the training stage to control model behavior, with a common attack goal being to plant backdoors that force the victim model to recognize a trigger known only by the adversary. The authors introduce a new class of backdoor attacks that hide inside model architectures, specifically in the inductive bias of the functions used to train. These backdoors are simple to implement, such as by publishing open-source code for a backdoored model architecture that others will reuse unknowingly. Unlike other approaches, architectural backdoors can survive complete re-training from scratch, making them particularly insidious and difficult to detect. The paper formalizes the main construction principles behind architectural backdoors, such as a link between input and output, and describes some possible protections against them. The authors evaluate their attacks on computer vision benchmarks of different scales and demonstrate that this underlying vulnerability is pervasive across various training settings. Overall, this research highlights an important aspect of machine learning security: not only must we be vigilant about data manipulation but also about potential vulnerabilities hidden within model architectures themselves. By raising awareness of these issues and proposing possible solutions, this work contributes significantly towards building more robust and secure machine learning systems.
Created on 23 Mar. 2023

Assess the quality of the AI-generated content by voting

Score: 0

Why do we need votes?

Votes are used to determine whether we need to re-run our summarizing tools. If the count reaches -10, our tools can be restarted.

The previous summary was created more than a year ago and can be re-run (if necessary) by clicking on the Run button below.

The license of this specific paper does not allow us to build upon its content and the summarizing tools will be run using the paper metadata rather than the full article. However, it still does a good job, and you can also try our tools on papers with more open licenses.

Look for similar papers (in beta version)

By clicking on the button above, our algorithm will scan all papers in our database to find the closest based on the contents of the full papers and not just on metadata. Please note that it only works for papers that we have generated summaries for and you can rerun it from time to time to get a more accurate result while our database grows.

Disclaimer: The AI-based summarization tool and virtual assistant provided on this website may not always provide accurate and complete summaries or responses. We encourage you to carefully review and evaluate the generated content to ensure its quality and relevance to your needs.