Design of Poisoning Attacks on Linear Regression Using Bilevel Optimization - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Preprints, Working Papers, ... Year : 2022

Design of Poisoning Attacks on Linear Regression Using Bilevel Optimization

Abstract

Poisoning attack is one of the attack types commonly studied in the field of adversarial machine learning. The adversary generating poison attacks is assumed to have access to the training process of a machine learning algorithm and aims to prevent the algorithm from functioning properly by injecting manipulative data while the algorithm is being trained. In this work, our focus is on poisoning attacks against linear regression models which target to weaken the prediction power of the attacked regression model. We propose a bilevel optimization problem to model this adversarial process between the attacker generating poisoning attacks and the learner which tries to learn the best predictive regression model. We give an alternative single level optimization problem by benefiting from the optimality conditions of the learner's problem. A commercial solver is used to solve the resulting single level optimization problem where we generate the whole set of poisoning attack samples at once. Besides, an iterative approach that allows to determine only a portion of poisoning attack samples at every iteration is introduced. The proposed attack strategies are shown to be superior than a benchmark algorithm from the literature by carrying out extensive experiments on two realistic datasets.
Fichier principal
Vignette du fichier
8409.pdf (277.97 Ko) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-03522996 , version 1 (12-01-2022)

Identifiers

  • HAL Id : hal-03522996 , version 1

Cite

Zeynep Şuvak, Miguel F Anjos, Luce Brotcorne, Diego Cattaruzza. Design of Poisoning Attacks on Linear Regression Using Bilevel Optimization. 2022. ⟨hal-03522996⟩
135 View
314 Download

Share

Gmail Mastodon Facebook X LinkedIn More