Are Targeted Data Poisoning Attacks as Effective as We Think?
A new research paper questions the effectiveness of targeted data poisoning attacks on machine learning models. The authors argue that current evaluations often overlook the worst-case scenarios by averaging success rates over random samples. They propose that defenses should focus on identifying the most vulnerable data points proactively, rather than relying on distribution-level analysis, as these attacks leave no trace at that level. AI
IMPACT Proposes a new methodology for evaluating and defending against data poisoning attacks, potentially improving model robustness.