Obrane klasifikacijskih modela od napada trovanjem podataka

undergraduate thesis

• Title (english): Defence of classification models from data-poisoning attacks
• Author: Luka Glavinić
• Mentor: Siniša Šegvić (mentor)
• Committee member: Siniša Šegvić (predsjednik povjerenstva)
• Committee member: Ivan Grubišić (član povjerenstva)
• Committee member: Zorana Doždor (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2023-07-06, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

U ovom radu je proučena funkcionalnost rezidualnog konvolucijskog modela ResNet-18.
Objašnjene su namjene i vrste napada otrovanim podacima ovakvog modela.
Detaljno objašnjene dvije metode za obranu od ovakvih napada i modula koje one koriste pri svom radu, a to su sigurno treniranje, kojim se trenira ekstraktor značajki i klasifikator i uklanjanje otrovanja iz modela.
Na kraju su pokazani eksperimenti i diskutirani rezultati eksperimenata.

Abstract (english)

In this paper, the functionality of the residual convolutional model ResNet-18 was studied.
The purposes and types of poisoned data attacks of this model are explained.
Two methods for defense against such attacks and the modules they use in their work are explained in detail: safe training, which trains the feature extractor and classifier and removes poisoning from the model.
At the end, the experiments were shown and the results of the experiments were discussed.

• Keywords: duboki konvolucijski model; model ResNet-18; CIFAR-10; CIFAR-100; ImageNet; metoda sigurnog treniranja(D-ST); metoda uklanjanja otrovanja modela (D-BR)
• Keywords (english): deep convolutional model; model ResNet-18; CIFAR-10; CIFAR-100; ImageNet; secure training method (D-ST); backdoor removal method (D-BR)
• Language: croatian
• URN:NBN: urn:nbn:hr:168:580034
• Study programme: Title: Computing; Study programme type: university; Study level: undergraduate; Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-07-13 10:03:55