{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/indiscriminate-data-poisoning-attacks-on","title":"Indiscriminate Data Poisoning Attacks on Neural Networks","arxiv_id":"2204.09092","date":"2022-04-19","proceeding":null,"authors":["Yiwei Lu","Gautam Kamath","YaoLiang Yu"],"abstract":"Data poisoning attacks, in which a malicious adversary aims to influence a model by injecting \"poisoned\" data into the training process, have attracted significant recent attention. In this work, we take a closer look at existing poisoning attacks and connect them with old and new algorithms for solving sequential Stackelberg games. By choosing an appropriate loss function for the attacker and optimizing with algorithms that exploit second-order information, we design poisoning attacks that are effective on neural networks. We present efficient implementations that exploit modern auto-differentiation packages and allow simultaneous and coordinated generation of tens of thousands of poisoned points, in contrast to existing methods that generate poisoned points one by one. We further perform extensive experiments that empirically explore the effect of data poisoning attacks on deep neural networks.","url_abs":"https://arxiv.org/abs/2204.09092v2","url_pdf":"https://arxiv.org/pdf/2204.09092v2.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"indiscriminate-data-poisoning-attacks-on","repo_url":"https://github.com/watml/tgda-attack","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":0,"framework":"pytorch","reach":{"status":"ok","spdx":"MIT"}}],"tasks":[{"task_slug":"data-poisoning","task_name":"Data Poisoning"}],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"atlas_url":"https://app.syntology.ai/?focus=2204.09092","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2204.09092"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/watml/tgda-attack","reach":{"status":"ok","spdx":"MIT"}}],"summary":{"ran_honours":1,"unverified":5},"by_repo_kind":{"official":{"samples":6,"ran":1,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":0,"samples":[{"code_sha256_prefix":"59a762d8a2476e97","entry":"autograd","repo":"watml/tgda-attack","repo_kind":"official","path":"loss_function.py","file_url":"https://github.com/watml/tgda-attack/blob/HEAD/loss_function.py","link_basis":"harvester_set","language":"python","status":"ran_honours","verification_level":1,"contract_check":"HONOURS","metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"59a762d8a2476e97"}},{"code_sha256_prefix":"cc489bfd1fb0f0d4","entry":"concat","repo":"watml/tgda-attack","repo_kind":"official","path":"utils.py","file_url":"https://github.com/watml/tgda-attack/blob/HEAD/utils.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"cc489bfd1fb0f0d4"}},{"code_sha256_prefix":"33077b2243c0f0a0","entry":"dot","repo":"watml/tgda-attack","repo_kind":"official","path":"utils.py","file_url":"https://github.com/watml/tgda-attack/blob/HEAD/utils.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"33077b2243c0f0a0"}},{"code_sha256_prefix":"efd73a00d518db9e","entry":"follower_loss","repo":"watml/tgda-attack","repo_kind":"official","path":"loss_function.py","file_url":"https://github.com/watml/tgda-attack/blob/HEAD/loss_function.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"efd73a00d518db9e"}},{"code_sha256_prefix":"7a6c24c8f0b4e54c","entry":"leader_loss","repo":"watml/tgda-attack","repo_kind":"official","path":"loss_function.py","file_url":"https://github.com/watml/tgda-attack/blob/HEAD/loss_function.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"7a6c24c8f0b4e54c"}},{"code_sha256_prefix":"02aa687cd06876bd","entry":"norm","repo":"watml/tgda-attack","repo_kind":"official","path":"utils.py","file_url":"https://github.com/watml/tgda-attack/blob/HEAD/utils.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"02aa687cd06876bd"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}