3 ms·
Since this blog post was written, the same authors have published further research on transferability which is what really makes these hard to defend against. T
by mholt 9y ago
Since this blog post was written, the same authors have published further research on transferability which is what really makes these hard to defend against. They even present a proof of concept task that is resistant to transferring (although it is not super practical): https://arxiv.org/abs/1704.03453 https://arxiv.org/abs/1704.03453
If it interests anyone, I wrote up a bit about this and other threats related to machine learning models, a few weeks ago: https://matt.life/papers/security_privacy_neural_networks.pdf https://matt.life/papers/security_privacy_neural_networks.pd...
- Sniffnoy 9y agoA note -- if you're linking to arXiv, it's better to link to the abstract (https://arxiv.org/abs/1704.03453 https://arxiv.org/abs/1704.03453) rather than directly to the PDF. From the abstract, one can easily click through to the PDF; not so the reverse. And the abstract allows one to do things like see different versions of the paper, search for other things by the same authors, etc. Thank you!
- mholt 9y agoGood point, I updated my link.