Machine learning has demonstrated promising application prospects in the field of vehicular technology during the past decade, for instance, it effectively propelled the development of autonomous vehicles and intelligent transportation systems. However, machine learning is still vulnerable to numerous malicious attacks. Amongst them, poisoning attack is one of the most severe security threats to the training process of machine learning, where the attacker injects some poisoned samples to the training dataset to make the learned model unavailable. As the crucial part of poisoning attack is generating poisoned samples, most proposals for poisoning attack have employed traditional gradient-based optimization algorithms to optimize the poisoned samples. Nevertheless, conventional gradient-based optimization algorithms are liable to get trapped in local optimums or saddle points and have a slow rate of convergence. As a result, these problems may lead to a reduction of the poisoned samples' effect. To address these issues, we propose two improved gradient-based poisoning attack algorithms. Specifically, in order to accelerate the convergence speed, we propose the first poisoning attack algorithm by employing momentum algorithm. Also, we propose the second poisoning attack algorithm by utilizing adam algorithm, which can get rid of some local optimums and has a faster convergence speed simultaneously. After that, support vector machines (SVM), linear regression and logistics regression are chosen as exemplary algorithms to conduct our attack algorithms and the effectiveness and computational overhead of the two attack algorithms are evaluated. Finally, we propose a countermeasure algorithm, which can detect suspicious samples using mahalanobis distance.


    Zugriff

    Zugriff prüfen

    Verfügbarkeit in meiner Bibliothek prüfen

    Bestellung bei Subito €


    Exportieren, teilen und zitieren



    Titel :

    Accelerating Poisoning Attack Through Momentum and Adam Algorithms


    Beteiligte:
    Jiang, Wenbo (Autor:in) / Li, Hongwei (Autor:in) / Gong, Li (Autor:in) / Yang, Haomiao (Autor:in) / Lu, Rongxing (Autor:in)


    Erscheinungsdatum :

    01.11.2020


    Format / Umfang :

    1171843 byte





    Medientyp :

    Aufsatz (Konferenz)


    Format :

    Elektronische Ressource


    Sprache :

    Englisch



    ACTION POISONING ATTACK SYSTEM AND ACTION POISONING ATTACK METHOD FOR AUTONOMOUS DRIVING MODEL

    CHOI DAESEON / YOONSOO AN | Europäisches Patentamt | 2025

    Freier Zugriff


    Peak-Controlled Logits Poisoning Attack in Federated Distillation

    Tang, Yuhan / Zhang, Aoxu / Wu, Zhiyuan et al. | ArXiv | 2024

    Freier Zugriff

    Deep reinforcement learning traffic signal control poisoning attack method based on Trojan horse attack

    XU DONGWEI / WANG DA / LI CHENGBIN | Europäisches Patentamt | 2022

    Freier Zugriff

    Logit Poisoning Attack in Distillation-based Federated Learning and its Countermeasures

    Yu, Yonghao / Zhu, Shunan / Hu, Jinglu | ArXiv | 2024

    Freier Zugriff