Skip to content

Commit d1febdb

Browse files
authored
Week 4: Scientific Paper (#2747)
* Week 4: Scientific Paper * Update README.md * Update README.md
1 parent a992635 commit d1febdb

1 file changed

Lines changed: 22 additions & 0 deletions

File tree

  • contributions/scientific-paper/week4/sawai-anicak
Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
# Assignment Proposal
2+
3+
## Title
4+
Poisoning Web-Scale Training Datasets is Practical
5+
6+
## Names and KTH ID
7+
* Anica Krüger (anicak@kth.se)
8+
* Shreyas Sawai (sawai@kth.se)
9+
10+
## Deadline
11+
* Week 4
12+
13+
## Category
14+
* Scientific paper
15+
16+
## Description
17+
This paper presents two novel, practical poisoning attacks which target web scale training datasets used for deep learning models. The authors explain how an attacker can introduce malicious data into these datasets by exploiting trust in how datasets are collected and updated. The paper presents two practical poisoning attacks on large scale web datasets used for training AI models. The first, split view poisoning, exploits mutable web content like expired domains to inject malicious data. The second, frontrunning poisoning, targets snapshot based datasets like Wikipedia by timing harmful edits just before data collection. These attacks are low cost and effective against major datasets. The authors propose defenses such as integrity checks using cryptographic hashes and randomized or delayed snapshots to mitigate these threats. The work highlights the urgent need for improved dataset security and transparency in AI development.
18+
19+
The paper can be found here: [link to paper](https://ieeexplore.ieee.org/abstract/document/10646610).
20+
21+
**Relevance**
22+
This paper is important for cybersecurity and AI safety because it shows how attackers can secretly tamper with large datasets used to train AI models, causing them to make wrong or unsafe decisions. These poisoning attacks are easy and cheap to carry out, especially since many AI systems rely on web scraped data. It highlights the need for strong defenses like data integrity checks and monitoring to keep AI models trustworthy and secure. In MLOps, managing clean and reliable data is key, so the paper’s findings stress the importance of protecting training data throughout the ML lifecycle to ensure safe and accurate AI deployment.

0 commit comments

Comments
 (0)