Efficient Availability Attacks against Supervised and Contrastive Learning Simultaneously
Not on the map. Why?
Abstract (arXiv)
Availability attacks can prevent the unauthorized use of private data and commercial datasets by generating imperceptible noise and making unlearnable examples before release. Ideally, the obtained unlearnability prevents algorithms from training usable models. When supervised learning (SL) algorithms have failed, a malicious data collector possibly resorts to contrastive learning (CL) algorithms to bypass the protection. Through evaluation, we have found that most of the existing methods are unable to achieve both supervised and contrastive unlearnability, which poses risks to data protection. Different from recent methods based on contrastive error minimization, we employ contrastive-like data augmentations in supervised error minimization or maximization frameworks to obtain attacks effective for both SL and CL. Our proposed AUE and AAP attacks achieve state-of-the-art worst-case unlearnability across SL and CL algorithms with less computation consumption, showcasing prospects in real-world applications.
Key facts. Cited by 12 papers in the map (data through 7 Oct 2026). Builds on 52 of its 62 references that are in the map. First posted on arXiv 6 Feb 2024.
Builds on
52 of 62 references.
References · 52
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 11,979
- 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
- 2018Representation Learning with Contrastive Predictive Codingcited by 7,662
- 2019Momentum Contrast for Unsupervised Visual Representation Learningcited by 7,482
- 2016Densely Connected Convolutional Networkscited by 6,691
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,773
- 2020Bootstrap your own latent: A new approach to self-supervised Learningcited by 4,712
- 2017MobileNets: Efficient Convolutional Neural Networks for Mobile Vision Applicationscited by 3,827
38 more
- 2016Wide Residual Networkscited by 3,057
- 2020Exploring Simple Siamese Representation Learningcited by 2,853
- 2020Supervised Contrastive Learningcited by 2,803
- 2020Improved Baselines with Momentum Contrastive Learningcited by 2,282
- 2016Matching Networks for One Shot Learningcited by 2,246
- 2020FixMatch: Simplifying Semi-Supervised Learning with Consistency and Confidencecited by 2,080
- 2018Unsupervised Feature Learning via Non-Parametric Instance-level Discriminationcited by 1,838
- 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,623
- 2020Understanding Contrastive Representation Learning through Alignment and Uniformity on the Hyperspherecited by 1,393
- 2022Diffusion Models for Adversarial Purificationcited by 469
- 2014Learning Face Representation from Scratchcited by 451
- 2017Wild Patterns: Ten Years After the Rise of Adversarial Machine Learningcited by 411
- 2019Kornia: an Open Source Differentiable Computer Vision Library for PyTorchcited by 231
- 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 188
- 2020Adversarial Self-Supervised Contrastive Learningcited by 138
- 2021Adversarial purification with Score-based generative modelscited by 132
- 2021Adversarial Examples Make Strong Poisonscited by 115
- 2019Learning to Confuse: Generating Training Time Adversarial Data with Auto-Encodercited by 70
- 2021Availability Attacks Create Shortcutscited by 60
- 2021Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Trainingcited by 58
- 2022Autoregressive Perturbations for Data Poisoningcited by 45
- 2023Black-box Backdoor Defense via Zero-shot Image Purificationcited by 44
- 2022Transferable Unlearnable Examplescited by 41
- 2023Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compressioncited by 39
- 2021Preventing Unauthorized Use of Proprietary Data: Poisoning for Secure Dataset Releasecited by 35
- 2022Unlearnable Clusters: Towards Label-agnostic Unlearnable Examplescited by 35
- 2022Robust Unlearnable Examples: Protecting Data Against Adversarial Learningcited by 34
- 2022Indiscriminate Poisoning Attacks on Unsupervised Contrastive Learningcited by 32
- 2022One-Pixel Shortcut: on the Learning Preference of Deep Neural Networkscited by 29
- 2023Learning the Unlearnable: Adversarial Augmentations Suppress Unlearnable Example Attackscited by 28
- 2023CUDA: Convolution-based Unlearnable Datasetscited by 26
- 2023What Can We Learn from Unlearnable Datasets?cited by 21
- 2022Self-Ensemble Protection: Training Checkpoints Are Good Data Protectorscited by 19
- 2023The Devil's Advocate: Shattering the Illusion of Unexploitable Data using Diffusion Modelscited by 19
- 2023Unlearnable Examples Give a False Sense of Security: Piercing through Unexploitable Data with Learnable Examplescited by 17
- 2023Detection and Defense of Unlearnable Examplescited by 13
- 2022Can Adversarial Training Be Manipulated By Non-Robust Features?cited by 12
- 2024Game-Theoretic Unlearnable Example Generatorcited by 12
50 most cited of 52 All 52 (JSON)
Built on by
Citing papers per year: 2024: 4; 2025: 2; 2026: 6.
12 papers.
- 2024Toward Availability Attacks in 3D Point Cloudscited by 7
- 2025A Survey on Unlearnable Datacited by 5
- 2026When Priors Backfire: On the Vulnerability of Unlearnable Examples to Pretrainingcited by 5
- 2024BridgePure: Limited Protection Leakage Can Break Black-Box Data Protectioncited by 3
- 2025Provable Watermarking for Data Poisoning Attackscited by 2
- 2026Why Do Unlearnable Examples Work: A Novel Perspective of Mutual Informationcited by 2
- 2024Outlier-Oriented Poisoning Attack: A Grey-box Approach to Disturb Decision Boundaries by Perturbing Outliers in Multiclass Learningcited by 1
- 2024Empirical Perturbation Analysis of Linear System Solvers from a Data Poisoning Perspectivecited by 0
- 2026SoK: Unlearnability and Unlearning for Model Dememorizationcited by 0
- 2026SoK: A Comprehensive Analysis of the Current Status of Neural Tangent Generalization Attacks with Research Directionscited by 0
- 2026Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecyclecited by 0
- 2026MUGEN: Generating Unlearnable Graph Examples for Multiple Learning Taskscited by 0
- 2026MUGEN: Generating Unlearnable Graph Examples for Multiple Learning Tasks1 Sep 2026
- 2026Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle5 Aug 2026
- 2026SoK: A Comprehensive Analysis of the Current Status of Neural Tangent Generalization Attacks with Research Directions12 May 2026
- 2026SoK: Unlearnability and Unlearning for Model Dememorization12 May 2026
- 2026When Priors Backfire: On the Vulnerability of Unlearnable Examples to Pretraining5 Mar 2026
- 2026Why Do Unlearnable Examples Work: A Novel Perspective of Mutual Information4 Mar 2026
- 2025Provable Watermarking for Data Poisoning Attacks10 Oct 2025
- 2025A Survey on Unlearnable Data30 Mar 2025
- 2024BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection30 Dec 2024
- 2024Outlier-Oriented Poisoning Attack: A Grey-box Approach to Disturb Decision Boundaries by Perturbing Outliers in Multiclass Learning1 Nov 2024
- 2024Empirical Perturbation Analysis of Linear System Solvers from a Data Poisoning Perspective1 Oct 2024
- 2024Toward Availability Attacks in 3D Point Clouds26 Jun 2024