4 ms·
> More specifically, we assume the attacker: > • can inject a small number of poison data (image/text pairs) to the model’s training dataset I think thoes ar
by Kuinox 3y ago
> More specifically, we assume the attacker:
> • can inject a small number of poison data (image/text pairs) to the model’s training dataset
I think thoes are bad assumption, labelling is more and more done by some labelling AI.
- freeone3000 3y agoUsually clip, which is actually how this works — the examples are modified to be misclassified in clip, but look passable to a human.