Efficient Availability Attacks against Supervised and Contrastive Learning Simultaneously

Availability attacks provide a tool to prevent the unauthorized use of private data and commercial datasets by generating imperceptible noise and crafting unlearnable examples before release. Ideally, the obtained unlearnability can prevent algorithms from training usable models. When supervised learning (SL) algorithms have failed, a malicious data collector possibly resorts to contrastive learning (CL) algorithms to bypass the protection. Through evaluation, we have found that most existing methods are unable to achieve both supervised and contrastive unlearnability, which poses risks to data protection by availability attacks. Different from recent methods based on contrastive learning, we employ contrastive-like data augmentations in supervised learning frameworks to obtain attacks effective for both SL and CL. Our proposed AUE and AAP attacks achieve state-of-the-art worst-case unlearnability across SL and CL algorithms with less computation consumption, showcasing prospects in real-world applications. The code is available at https: //github. com/EhanW/AUE-AAP.

Authors

• Yihan Wang Academy of Mathematics and Systems Science, Chinese Academy of Sciences University of Chinese Academy of Sciences
• Yifan Zhu Beijing University of Posts and Telecommunications
• Xiao-Shan Gao Academy of Mathematics and Systems Science, CAS, Beijing 100190, China University of Chinese Academy of Sciences, Beijing 101408, China

Keywords

No keywords are indexed for this paper.