LATIDIA · Ciberseguridad

Ataques de puerta trasera bajo compresión con pérdida: del fracaso a la reactivación y la adaptación

arXiv:2603.13864v3 Anuncio Tipo: reemplazar Resumen: Los ataques de puerta trasera en el mundo real a menudo requieren que los conjuntos de datos envenenados se almacenen y transmitan antes de que se utilicen para comprometer los sistemas de aprendizaje profundo. En la era del big data

La noticia

arXiv:2603.13864v3 Announce Type: replace Abstract: Real-world backdoor attacks often require poisoned datasets to be stored and transmitted before they are used to compromise deep learning systems. In the era of big data, however, the inevitable use of lossy compression poses a fundamental challenge to invisible backdoor attacks. We observe that triggers embedded in RGB images can become ineffective once the images are lossily compressed into binary bitstreams, such as JPEG files, for storage and transmission. Consequently, poisoned data may lose their malicious functionality after compression, causing backdoor injection to fail. Prior compression-based attacks typically exploit compression artifacts as certain triggers to distinguish poisoned RGB samples from uncompressed benign ones, rather