Phantom Transfer: Data Poisoning can Survive Data-Level Defences
Researchers have developed a novel data poisoning attack called "Phantom Transfer" that can subtly manipulate AI models, even when the exact method of data corruption is known. This attack is designed to be resilient, surviving various data-level defenses and remaining effective regardless of the model architecture or target. The findings highlight the limitations of current defenses and suggest the need for more robust methods like white-box audits and post-training model analysis to combat sophisticated data poisoning. AI
IMPACT Highlights the vulnerability of AI models to sophisticated data poisoning, necessitating new defense strategies beyond current data-level filtering.