mlsanityData to 7 Oct 2026

Manipulating Predictions over Discrete Inputs in Machine Teaching

arXiv 2401.17865 ↗First posted 31 Jan 2024cs.LG cs.AIcited by 0

Not on the map. Why?

Abstract (arXiv)

Machine teaching often involves the creation of an optimal (typically minimal) dataset to help a model (referred to as the `student') achieve specific goals given by a teacher. While abundant in the continuous domain, the studies on the effectiveness of machine teaching in the discrete domain are relatively limited. This paper focuses on machine teaching in the discrete domain, specifically on manipulating student models' predictions based on the goals of teachers via changing the training data efficiently. We formulate this task as a combinatorial optimization problem and solve it by proposing an iterative searching algorithm. Our algorithm demonstrates significant numerical merit in the scenarios where a teacher attempts at correcting erroneous predictions to improve the student's models, or maliciously manipulating the model to misclassify some specific samples to the target class aligned with his personal profits. Experimental results show that our proposed algorithm can have superior performance in effectively and efficiently manipulating the predictions of the model, surpassing conventional baselines.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 27 of its 49 references that are in the map. First posted on arXiv 31 Jan 2024.

Builds on

27 of 49 references.

References · 27

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
  3. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  4. 2019XLNet: Generalized Autoregressive Pretraining for Language Understandingcited by 2,801
  5. 2017Understanding Black-box Predictions via Influence Functionscited by 1,714
  6. 2018Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networkscited by 500
  7. 2020Weight Poisoning Attacks on Pre-trained Modelscited by 318
  8. 2017Generating Natural Adversarial Examplescited by 182
  9. 2020Witches' Brew: Industrial Scale Data Poisoning via Gradient Matchingcited by 156
  10. 2020Dynamic Backdoor Attacks Against Machine Learning Modelscited by 147
  11. 2018Stronger Data Poisoning Attacks Break Data Sanitization Defensescited by 125
  12. 2017Dipole: Diagnosis Prediction in Healthcare via Attention-based Bidirectional Recurrent Neural Networkscited by 114
15 more
  1. 2021Be Careful about Poisoned Word Embeddings: Exploring the Vulnerability of the Embedding Layers in NLP Modelscited by 96
  2. 2020Subpopulation Data Poisoning Attackscited by 68
  3. 2020Bullseye Polytope: A Scalable Clean-Label Poisoning Attack with Improved Transferabilitycited by 65
  4. 2017Generative Poisoning Attack Method Against Neural Networkscited by 49
  5. 2017Machine Teaching: A New Paradigm for Building Machine Learning Systemscited by 41
  6. 2021An Overview of Backdoor Attacks Against Deep Neural Networks and Possible Defencescited by 41
  7. 2017Iterative Machine Teachingcited by 40
  8. 2017Active classification with comparison queriescited by 27
  9. 2020Poison Attacks against Text Datasets with Conditional Adversarially Regularized Autoencodercited by 27
  10. 2018Training Set Debugging Using Trusted Itemscited by 24
  11. 2019Poisoning Attacks with Generative Adversarial Netscited by 21
  12. 2021Putting words into the system's mouth: A targeted attack on neural machine translation using monolingual data poisoningcited by 19
  13. 2013Machine Teaching for Bayesian Learners in the Exponential Familycited by 18
  14. 2020Humpty Dumpty: Controlling Word Meanings via Corpus Poisoningcited by 17
  15. 2018Understanding the Role of Adaptivity in Machine Teaching: The Case of Version Space Learnerscited by 16

Built on by

Not cited yet.