mlsanityData to 7 Oct 2026

Efficient Availability Attacks against Supervised and Contrastive Learning Simultaneously

arXiv 2402.04010 ↗First posted 6 Feb 2024cs.LG stat.MLcited by 12

Not on the map. Why?

Abstract (arXiv)

Availability attacks can prevent the unauthorized use of private data and commercial datasets by generating imperceptible noise and making unlearnable examples before release. Ideally, the obtained unlearnability prevents algorithms from training usable models. When supervised learning (SL) algorithms have failed, a malicious data collector possibly resorts to contrastive learning (CL) algorithms to bypass the protection. Through evaluation, we have found that most of the existing methods are unable to achieve both supervised and contrastive unlearnability, which poses risks to data protection. Different from recent methods based on contrastive error minimization, we employ contrastive-like data augmentations in supervised error minimization or maximization frameworks to obtain attacks effective for both SL and CL. Our proposed AUE and AAP attacks achieve state-of-the-art worst-case unlearnability across SL and CL algorithms with less computation consumption, showcasing prospects in real-world applications.

Key facts. Cited by 12 papers in the map (data through 7 Oct 2026). Builds on 52 of its 62 references that are in the map. First posted on arXiv 6 Feb 2024.

Builds on

52 of 62 references.

References · 52

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
  3. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
  4. 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 11,979
  5. 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
  6. 2018Representation Learning with Contrastive Predictive Codingcited by 7,662
  7. 2019Momentum Contrast for Unsupervised Visual Representation Learningcited by 7,482
  8. 2016Densely Connected Convolutional Networkscited by 6,691
  9. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  10. 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,773
  11. 2020Bootstrap your own latent: A new approach to self-supervised Learningcited by 4,712
  12. 2017MobileNets: Efficient Convolutional Neural Networks for Mobile Vision Applicationscited by 3,827
38 more
  1. 2016Wide Residual Networkscited by 3,057
  2. 2020Exploring Simple Siamese Representation Learningcited by 2,853
  3. 2020Supervised Contrastive Learningcited by 2,803
  4. 2020Improved Baselines with Momentum Contrastive Learningcited by 2,282
  5. 2016Matching Networks for One Shot Learningcited by 2,246
  6. 2020FixMatch: Simplifying Semi-Supervised Learning with Consistency and Confidencecited by 2,080
  7. 2018Unsupervised Feature Learning via Non-Parametric Instance-level Discriminationcited by 1,838
  8. 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,623
  9. 2020Understanding Contrastive Representation Learning through Alignment and Uniformity on the Hyperspherecited by 1,393
  10. 2022Diffusion Models for Adversarial Purificationcited by 469
  11. 2014Learning Face Representation from Scratchcited by 451
  12. 2017Wild Patterns: Ten Years After the Rise of Adversarial Machine Learningcited by 411
  13. 2019Kornia: an Open Source Differentiable Computer Vision Library for PyTorchcited by 231
  14. 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 188
  15. 2020Adversarial Self-Supervised Contrastive Learningcited by 138
  16. 2021Adversarial purification with Score-based generative modelscited by 132
  17. 2021Adversarial Examples Make Strong Poisonscited by 115
  18. 2019Learning to Confuse: Generating Training Time Adversarial Data with Auto-Encodercited by 70
  19. 2021Availability Attacks Create Shortcutscited by 60
  20. 2021Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Trainingcited by 58
  21. 2022Autoregressive Perturbations for Data Poisoningcited by 45
  22. 2023Black-box Backdoor Defense via Zero-shot Image Purificationcited by 44
  23. 2022Transferable Unlearnable Examplescited by 41
  24. 2023Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compressioncited by 39
  25. 2021Preventing Unauthorized Use of Proprietary Data: Poisoning for Secure Dataset Releasecited by 35
  26. 2022Unlearnable Clusters: Towards Label-agnostic Unlearnable Examplescited by 35
  27. 2022Robust Unlearnable Examples: Protecting Data Against Adversarial Learningcited by 34
  28. 2022Indiscriminate Poisoning Attacks on Unsupervised Contrastive Learningcited by 32
  29. 2022One-Pixel Shortcut: on the Learning Preference of Deep Neural Networkscited by 29
  30. 2023Learning the Unlearnable: Adversarial Augmentations Suppress Unlearnable Example Attackscited by 28
  31. 2023CUDA: Convolution-based Unlearnable Datasetscited by 26
  32. 2023What Can We Learn from Unlearnable Datasets?cited by 21
  33. 2022Self-Ensemble Protection: Training Checkpoints Are Good Data Protectorscited by 19
  34. 2023The Devil's Advocate: Shattering the Illusion of Unexploitable Data using Diffusion Modelscited by 19
  35. 2023Unlearnable Examples Give a False Sense of Security: Piercing through Unexploitable Data with Learnable Examplescited by 17
  36. 2023Detection and Defense of Unlearnable Examplescited by 13
  37. 2022Can Adversarial Training Be Manipulated By Non-Robust Features?cited by 12
  38. 2024Game-Theoretic Unlearnable Example Generatorcited by 12

50 most cited of 52 All 52 (JSON)

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 4; 2025: 2; 2026: 6.

12 papers.