Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper investigates adversarial attacks on continuous data summarization, revealing how perturbations can significantly compromise the integrity of the summarization process and degrade downstream learning tasks. By formulating multi-target attack generation as a min-max optimization problem, the authors demonstrate that specific adversarial perturbations can effectively degrade multiple summarization models simultaneously. Their robust defense strategy, framed as a regularized max-min problem, shows promise in enhancing the robustness-mitigation trade-off, with experimental results highlighting its effectiveness in real-world scenarios.
Adversarial perturbations can drastically undermine data summarization, leading to significant performance losses in downstream AI tasks.
Trustworthy AI requires reliable data-processing pipelines, not only robust downstream predictive models. As an upstream component, data summarization determines which information is retained and passed to subsequent learning or decision modules. Therefore, adversarial perturbations to the summarization process can compromise trustworthy AI in an upstream manner: they may alter the selected summary, reduce its representativeness, and further degrade the utility of subsequent learning tasks. In this paper, we study adversarial attacks on continuous data summarization under similarity-level perturbations through DR-submodular optimization. We show that a class of multi-resolution image summarization objectives can be formulated as multilinear extensions of non-negative submodular set functions and satisfy DR-submodularity with $m$-weak monotonicity. We then formulate multi-target attack generation as a min-max problem, where one admissible perturbation of the similarity structure is optimized to degrade multiple target summarization models. To mitigate such perturbations, we formulate robust defense against mixed attack types as a regularized max-min problem. For both problems, we develop approximation algorithms with theoretical guarantees. Experiments on real-data and controlled clustered benchmarks show that the proposed attack is effective in representative low-to-moderate budget regimes and can induce downstream task-performance loss. The proposed defense improves the robustness--mitigation trade-off in structured settings, while also revealing the parameter sensitivity of robust protection on real data.