Pith. sign in

REVIEW 1 cited by

The last Dance : Robust backdoor attack via diffusion models and bayesian approach

Not yet reviewed by Pith; the record is open.

This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.

SPECIMEN: schema-true, not a live event

T0 review · schema-true

One-sentence machine reading of the paper's core claim.

pith:XXXXXXXX · record.json · timestamp

arxiv 2402.05967 v7 pith:3P3J7V36 submitted 2024-02-05 cs.LG cs.AIcs.CReess.SP

classification cs.LGcs.AIcs.CReess.SP
keywords modelsbackdoordiffusionlearningapproachartificialattackaudio
verification ladder T0 review T1 audit T2 compute T3 formal
0 comments
read the original abstract

Diffusion models are state-of-the-art deep learning generative models that are trained on the principle of learning forward and backward diffusion processes via the progressive addition of noise and denoising. In this paper, we aim to fool audio-based DNN models, such as those from the Hugging Face framework, primarily those that focus on audio, in particular transformer-based artificial intelligence models, which are powerful machine learning models that save time and achieve results faster and more efficiently. We demonstrate the feasibility of backdoor attacks (called `BacKBayDiffMod`) on audio transformers derived from Hugging Face, a popular framework in the world of artificial intelligence research. The backdoor attack developed in this paper is based on poisoning model training data uniquely by incorporating backdoor diffusion sampling and a Bayesian approach to the distribution of poisoned data.

Discussion (0). Continue with ORCID to comment.

Forward citations

Cited by 1 Pith paper

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score. Full citation record

  1. Trading Devil RL: Backdoor attack via Stock market, Bayesian Optimization and Reinforcement Learning

    cs.LG 2024-12 reject novelty 2.0 of 10

    A data-poisoning backdoor attack on audio transformers is claimed with 100 percent success on TIMIT, but the paper provides no reproducible derivation or evaluation.

Pith tools