{"id":"W4396790742","doi":"10.1109/satml59370.2024.00023","title":"Indiscriminate Data Poisoning Attacks on Pre-trained Feature Extractors","year":2024,"lang":"en","type":"article","venue":"","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":5,"is_retracted":false,"has_abstract":true,"ca_institutions":"Vector Institute; University of Waterloo","funders":"","keywords":"Computer science; Feature (linguistics); Machine learning; Artificial intelligence; Extractor; Set (abstract data type); Labeled data; Downstream (manufacturing); Training set; Feature vector; Supervised learning; Process (computing); Artificial neural network; Engineering","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.003686255,0.001633759,0.001514127,0.000788012,0.0006211104,0.001271914,0.002013844,0.002003538,0.00188146],"category_scores_gemma":[0.0213829,0.0008658181,0.001370096,0.0008255214,0.002701102,0.004957764,0.004446807,0.005057344,0.001608878],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0009222588,"about_ca_system_score_gemma":0.0009342373,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0006555707,"about_ca_topic_score_gemma":0.0007061754,"domain_scores_codex":[0.9948178,0.001537139,0.0004024672,0.0009670812,0.001815271,0.0004601545],"domain_scores_gemma":[0.9836994,0.00494787,0.001212587,0.008815134,0.001117031,0.0002079606],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.002022098,0.0005796294,0.01275666,0.0006168567,0.0003909021,0.001420711,0.001067842,0.2226216,0.09705712,0.09702771,0.0165498,0.547889],"study_design_scores_gemma":[0.00008528068,0.0004027216,0.001895765,0.00008681718,0.0000633479,0.0009005679,0.000109266,0.8281785,0.09983262,0.06078623,0.007592587,0.0000662973],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.09697224,0.0005476358,0.8875405,0.001336637,0.0001506108,0.0002762644,0.0004193771,0.007812445,0.004944176],"genre_scores_gemma":[0.8184494,0.0003050281,0.1750254,0.0008025934,0.00007297894,0.0003278593,0.0005651815,0.0004683232,0.003983236],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.003686255,"threshold_uncertainty_score":0.01949501,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.03982274016507497,"score_gpt":0.3439346978512736,"score_spread":0.3041119576861986,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}