{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/indiscriminate-poisoning-attacks-on","title":"Indiscriminate Poisoning Attacks on Unsupervised Contrastive Learning","arxiv_id":"2202.11202","date":"2022-02-22","proceeding":null,"authors":["Hao He","Kaiwen Zha","Dina Katabi"],"abstract":"Indiscriminate data poisoning attacks are quite effective against supervised learning. However, not much is known about their impact on unsupervised contrastive learning (CL). This paper is the first to consider indiscriminate poisoning attacks of contrastive learning. We propose Contrastive Poisoning (CP), the first effective such attack on CL. We empirically show that Contrastive Poisoning, not only drastically reduces the performance of CL algorithms, but also attacks supervised learning models, making it the most generalizable indiscriminate poisoning attack. We also show that CL algorithms with a momentum encoder are more robust to indiscriminate poisoning, and propose a new countermeasure based on matrix completion. Code is available at: https://github.com/kaiwenzha/contrastive-poisoning.","url_abs":"https://arxiv.org/abs/2202.11202v3","url_pdf":"https://arxiv.org/pdf/2202.11202v3.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"indiscriminate-poisoning-attacks-on","repo_url":"https://github.com/kaiwenzha/contrastive-poisoning","is_official":1,"mentioned_in_paper":0,"mentioned_in_github":1,"framework":"pytorch","reach":null}],"tasks":[{"task_slug":"contrastive-learning","task_name":"Contrastive Learning"},{"task_slug":"data-augmentation","task_name":"Data Augmentation"},{"task_slug":"data-poisoning","task_name":"Data Poisoning"},{"task_slug":"matrix-completion","task_name":"Matrix Completion"}],"methods":[{"method_slug":"1x1-convolution","method_name":"1x1 Convolution"},{"method_slug":"average-pooling","method_name":"Average Pooling"},{"method_slug":"byol","method_name":"BYOL"},{"method_slug":"batch-normalization","method_name":"Batch Normalization"},{"method_slug":"bottleneck-residual-block","method_name":"Bottleneck Residual Block"},{"method_slug":"colorjitter","method_name":"ColorJitter"},{"method_slug":"contrastive-learning","method_name":"Contrastive Learning"},{"method_slug":"convolution","method_name":"Convolution"},{"method_slug":"dense-connections","method_name":"Dense Connections"},{"method_slug":"feedforward-network","method_name":"Feedforward Network"},{"method_slug":"global-average-pooling","method_name":"Global Average Pooling"},{"method_slug":"infonce","method_name":"InfoNCE"},{"method_slug":"kaiming-initialization","method_name":"Kaiming Initialization"},{"method_slug":"max-pooling","method_name":"Max Pooling"},{"method_slug":"moco","method_name":"MoCo"},{"method_slug":"nt-xent","method_name":"NT-Xent"},{"method_slug":"random-gaussian-blur","method_name":"Random Gaussian Blur"},{"method_slug":"random-resized-crop","method_name":"Random Resized Crop"},{"method_slug":"relu","method_name":"ReLU"},{"method_slug":"residual-block","method_name":"Residual Block"},{"method_slug":"residual-connection","method_name":"Residual Connection"},{"method_slug":"simclr","method_name":"SimCLR"}],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"syntology_url":"https://syntology.ai/paper/2202.11202","atlas_url":"https://app.syntology.ai/?focus=2202.11202","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2202.11202"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-25T09:33:49+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"deterministic:regex_extraction","url":"https://github.com/kaiwenzha/contrastive-poisoning","reach":null}],"summary":{"ran":9,"ran_draft_wrong":4,"unverified":5},"by_repo_kind":{"official":{"samples":18,"ran":13,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":0,"samples":[{"code_sha256_prefix":"f5329be21bc798d0","entry":"BYOL","repo":"kaiwenzha/contrastive-poisoning","repo_kind":"official","path":"model.py","file_url":"https://github.com/kaiwenzha/contrastive-poisoning/blob/HEAD/model.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":"deterministic","behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"f5329be21bc798d0"}},{"code_sha256_prefix":"e93841d2aa94ddad","entry":"BasicBlock","repo":"kaiwenzha/contrastive-poisoning","repo_kind":"official","path":"model.py","file_url":"https://github.com/kaiwenzha/contrastive-poisoning/blob/HEAD/model.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":"deterministic","behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"e93841d2aa94ddad"}},{"code_sha256_prefix":"613844ebc89b237b","entry":"Bottleneck","repo":"kaiwenzha/contrastive-poisoning","repo_kind":"official","path":"model.py","file_url":"https://github.com/kaiwenzha/contrastive-poisoning/blob/HEAD/model.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":"deterministic","behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"613844ebc89b237b"}},{"code_sha256_prefix":"396b12c0d690c96b","entry":"ResNet","repo":"kaiwenzha/contrastive-poisoning","repo_kind":"official","path":"model.py","file_url":"https://github.com/kaiwenzha/contrastive-poisoning/blob/HEAD/model.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"396b12c0d690c96b"}},{"code_sha256_prefix":"bb2b7357a288f84c","entry":"ResNetNoHead","repo":"kaiwenzha/contrastive-poisoning","repo_kind":"official","path":"model.py","file_url":"https://github.com/kaiwenzha/contrastive-poisoning/blob/HEAD/model.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":"deterministic","behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"bb2b7357a288f84c"}},{"code_sha256_prefix":"2e47d5200e06bb5d","entry":"ResNetWithHead","repo":"kaiwenzha/contrastive-poisoning","repo_kind":"official","path":"model.py","file_url":"https://github.com/kaiwenzha/contrastive-poisoning/blob/HEAD/model.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":"deterministic","behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"2e47d5200e06bb5d"}},{"code_sha256_prefix":"dd9595263567cf07","entry":"TextFormat","repo":"kaiwenzha/contrastive-poisoning","repo_kind":"official","path":"model.py","file_url":"https://github.com/kaiwenzha/contrastive-poisoning/blob/HEAD/model.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"dd9595263567cf07"}},{"code_sha256_prefix":"fc4d4f310d9bfc0e","entry":"_get_byol_mlp","repo":"kaiwenzha/contrastive-poisoning","repo_kind":"official","path":"model.py","file_url":"https://github.com/kaiwenzha/contrastive-poisoning/blob/HEAD/model.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":"deterministic","behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"fc4d4f310d9bfc0e"}},{"code_sha256_prefix":"0f408c13a7b48d93","entry":"log","repo":"kaiwenzha/contrastive-poisoning","repo_kind":"official","path":"model.py","file_url":"https://github.com/kaiwenzha/contrastive-poisoning/blob/HEAD/model.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":"deterministic","behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"0f408c13a7b48d93"}},{"code_sha256_prefix":"188a542bb3d0c413","entry":"resnet101","repo":"kaiwenzha/contrastive-poisoning","repo_kind":"official","path":"model.py","file_url":"https://github.com/kaiwenzha/contrastive-poisoning/blob/HEAD/model.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":"deterministic","behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"188a542bb3d0c413"}},{"code_sha256_prefix":"907fb9d80310a75f","entry":"resnet18","repo":"kaiwenzha/contrastive-poisoning","repo_kind":"official","path":"model.py","file_url":"https://github.com/kaiwenzha/contrastive-poisoning/blob/HEAD/model.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":"deterministic","behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"907fb9d80310a75f"}},{"code_sha256_prefix":"b5e082eee874ab6a","entry":"resnet34","repo":"kaiwenzha/contrastive-poisoning","repo_kind":"official","path":"model.py","file_url":"https://github.com/kaiwenzha/contrastive-poisoning/blob/HEAD/model.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":"deterministic","behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"b5e082eee874ab6a"}},{"code_sha256_prefix":"bc02a35848587cf8","entry":"resnet50","repo":"kaiwenzha/contrastive-poisoning","repo_kind":"official","path":"model.py","file_url":"https://github.com/kaiwenzha/contrastive-poisoning/blob/HEAD/model.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":"deterministic","behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"bc02a35848587cf8"}},{"code_sha256_prefix":"3e90e9281a3090fb","entry":"AttackModel","repo":"kaiwenzha/contrastive-poisoning","repo_kind":"official","path":"model.py","file_url":"https://github.com/kaiwenzha/contrastive-poisoning/blob/HEAD/model.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"3e90e9281a3090fb"}},{"code_sha256_prefix":"3806b767e591b869","entry":"MoCo","repo":"kaiwenzha/contrastive-poisoning","repo_kind":"official","path":"model.py","file_url":"https://github.com/kaiwenzha/contrastive-poisoning/blob/HEAD/model.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"3806b767e591b869"}},{"code_sha256_prefix":"de6d1a439b0eb3ae","entry":"_MomentumEncoderMixin","repo":"kaiwenzha/contrastive-poisoning","repo_kind":"official","path":"model.py","file_url":"https://github.com/kaiwenzha/contrastive-poisoning/blob/HEAD/model.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"de6d1a439b0eb3ae"}},{"code_sha256_prefix":"d2c729d46218e6c7","entry":"_deactivate_requires_grad","repo":"kaiwenzha/contrastive-poisoning","repo_kind":"official","path":"model.py","file_url":"https://github.com/kaiwenzha/contrastive-poisoning/blob/HEAD/model.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"d2c729d46218e6c7"}},{"code_sha256_prefix":"9ff781762297580d","entry":"_do_momentum_update","repo":"kaiwenzha/contrastive-poisoning","repo_kind":"official","path":"model.py","file_url":"https://github.com/kaiwenzha/contrastive-poisoning/blob/HEAD/model.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"9ff781762297580d"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}