{"id":11335,"date":"2022-03-28T07:00:00","date_gmt":"2022-03-28T15:00:00","guid":{"rendered":"https:\/\/formtek.com\/blog\/?p=11335"},"modified":"2021-08-13T13:41:45","modified_gmt":"2021-08-13T21:41:45","slug":"data-poisoning-machine-learning-susceptible-to-manipulation-by-hackers","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/data-poisoning-machine-learning-susceptible-to-manipulation-by-hackers\/","title":{"rendered":"Data Poisoning: Machine Learning Susceptible to Manipulation by Hackers"},"content":{"rendered":"\n

Data poisoning is the alteration or manipulation of Machine Language (ML) training data. While the amount of data changed may be small, it may be enough to both avoid detection and to bias the algorithm into favoring a particular result.<\/p>\n\n\n\n

Along with the popularity of Machine Learning has been the free availability of data sets and training results used for machine learning. While this can be a great resource and be very useful to organizations without large budgets to acquire data, there now becomes the worry, or at least, the question about whether or not the data is reliable and trustworthy.<\/p>\n\n\n\n

Eugene Bagdasaryan<\/a>, a doctoral candidate at Cornell Tech, said that<\/a> “with many companies and programmers using models and codes from open-source sites on the internet, it is important to review and verify materials before integrating them into your current system. If hackers are able to implement code poisoning, they could manipulate models that automate supply chains and propaganda, as well as resume-screening and toxic comment deletion.”<\/p>\n\n\n\n

Hyrum Anderson<\/a>, principal architect for Trustworthy Machine Learning at Microsoft, told CSOOnline that<\/a> “there’s this whole notion in academia right now that I think is really cool and not yet practical, but we’ll get there, that’s called machine unlearning<\/em>. For GPT-3, the cost was $16 million or something to train the model once. If it were poisoned and identified after the fact, it could be really expensive to find the poisoned data and retrain. But if I could unlearn, if I could just say ‘Hey, for these data, undo their effects and my weights,’ that could be a significantly cheaper way to build a defense. I think practical solutions for machine unlearning are still years away, though. So yes, the solution at this point is to retrain with good data and that can be super hard to accomplish or expensive.”<\/p>\n

\"Digg<\/a><\/div>
\"Reddit<\/a><\/div>
\"Stumble<\/a><\/div>
\"Buzz<\/a><\/div>
\"Vote<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Kick<\/a><\/div>
\"Shout<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Post<\/a><\/div>
\"Google<\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"

Data poisoning is the alteration or manipulation of Machine Language (ML) training data. While the amount of data changed may be small, it may be enough to both avoid detection and to bias the algorithm into favoring a particular result.…<\/span><\/p>\n

Read more ›<\/a><\/div>\n

<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[69,62,31],"tags":[],"class_list":["post-11335","post","type-post","status-publish","format-standard","hentry","category-artificial-intelligence","category-machine-learning","category-security"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/11335","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=11335"}],"version-history":[{"count":1,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/11335\/revisions"}],"predecessor-version":[{"id":11336,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/11335\/revisions\/11336"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=11335"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=11335"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=11335"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}