+This paper presents two novel, practical poisoning attacks which target web scale training datasets used for deep learning models. The authors explain how an attacker can introduce malicious data into these datasets by exploiting trust in how datasets are collected and updated. The paper presents two practical poisoning attacks on large scale web datasets used for training AI models. The first, split view poisoning, exploits mutable web content like expired domains to inject malicious data. The second, frontrunning poisoning, targets snapshot based datasets like Wikipedia by timing harmful edits just before data collection. These attacks are low cost and effective against major datasets. The authors propose defenses such as integrity checks using cryptographic hashes and randomized or delayed snapshots to mitigate these threats. The work highlights the urgent need for improved dataset security and transparency in AI development.
0 commit comments