Search papers, labs, and topics across Lattice.
This study investigates the effects of poisoning attacks on augmented 3D point cloud datasets, particularly in the context of connected and autonomous vehicles. The authors demonstrate that data augmentation techniques, while generally intended to enhance data integrity, can inadvertently allow poisoning attacks to propagate and evade detection, ultimately compromising classifier performance. Key findings reveal that Generative Adversarial Networks (GANs) used for data augmentation do not mitigate the risks associated with poisoned samples, raising significant concerns for the safety of machine learning systems reliant on these datasets.
Poisoned 3D point cloud datasets can evade augmentation defenses, undermining the reliability of classifiers in autonomous vehicle systems.
Poisoning attacks against public datasets lead to major concerns, such as (i) misclassification of perceived objects when the poisoned data is used for training and (ii) embedding of backdoors that may eventually be triggered later on, when specific conditions in the system apply over the learned models. Its impact over data augmentation models is unclear. While data augmentation reduces the likelihood of poisoning attack success, some valid questions remain. Is data augmentation affecting the impact of poisoning attacks? can it increase the number of poisoned samples or injected backdoors? We explore in this paper some of these questions. We assess the effects of augmenting poisoned 3D point cloud datasets and validate that poisoning is able to evade the sanitizing nature of augmentation techniques when using the concrete case of Generative Adversarial Network (GAN) techniques to exemplify the case of data augmentation processing. We also validate that poisoning propagates over the augmented datasets and perturbs the decision made by general-purpose classifiers, in the end. All the experimental material (including tools, datasets, and classifiers) is publicly available, to facilitate reproducibility and to foster further research in the topic.
