Indiscriminate Poisoning Attacks on Unsupervised Contrastive Learning
Abstract
Indiscriminate data poisoning attacks are quite effective against supervised learning. However, not much is known about their impact on unsupervised contrastive learning (CL). This paper is the first to consider indiscriminate poisoning attacks of contrastive learning. We propose Contrastive Poisoning (CP), the first effective such attack on CL. We empirically show that Contrastive Poisoning, not only drastically reduces the performance of CL algorithms, but also attacks supervised learning models, making it the most generalizable indiscriminate poisoning attack. We also show that CL algorithms with a momentum encoder are more robust to indiscriminate poisoning, and propose a new countermeasure based on matrix completion. Code is available at: https://github.com/kaiwenzha/contrastive-poisoning.
Keywords
Cite
@article{arxiv.2202.11202,
title = {Indiscriminate Poisoning Attacks on Unsupervised Contrastive Learning},
author = {Hao He and Kaiwen Zha and Dina Katabi},
journal= {arXiv preprint arXiv:2202.11202},
year = {2023}
}
Comments
ICLR 2023 Spotlight (notable top 25%). The first two authors contributed equally to this paper