引导式测验 · 中等 等级

数据中毒和后门攻击测验

将中毒和触发的后门与干净标签数据、BadNet、可变网络资源、频谱防御和可信完整性哈希进行比较。

相关引导路径数据中毒和后门攻击
问题 1 的 8

Which goal distinguishes a triggered backdoor from general availability poisoning?

预览每个问题8 问题

当您参加测验时，就会出现答案和解释。

  1. Which goal distinguishes a triggered backdoor from general availability poisoning?
    • Attacker-chosen behavior associated with a specified trigger
    • A requirement that every clean input must be misclassified
    • A guarantee that all triggered inputs succeed without errors
    • A requirement that only image models can be attacked
  2. What does clean-label poisoning preserve in its modified training examples?
    • A guarantee that every example is harmless
    • Every original input byte with no change
    • A label appropriate to the training item
    • A guarantee that no defense can detect the poison
  3. BadNets 研究著名地证明了什么？
    • 更快的训练算法
    • 通过贴纸触发器将停车标志错误分类为限速标志
    • 新的优化器
    • 一种压缩模型的方法
  4. 研究人员如何证明网络规模的数据集可以廉价地中毒？
    • 通过入侵云服务器
    • 通过贿赂注释者
    • 通过使网络超载
    • 通过购买托管一小部分数据集图像 URL 的过期域名
  5. What does Spectral Signatures in Backdoor Attacks study as a defense signal?
    • A proof that all larger batches eliminate triggers
    • Only document filenames sorted alphabetically
    • Suspicious statistical structure in learned representations
    • A guarantee that all clean accuracy equals zero
  6. Why can a dataset index pointing to remote content have a split-view poisoning exposure?
    • The indexed resource can change before a later downloader retrieves it
    • Every URL necessarily points to an immutable archived copy
    • All dataset labels are automatically rewritten at inference
    • A domain’s first owner must keep permanent control forever
  7. Which stage is directly manipulated in a data-poisoning attack, as opposed to an inference-only input perturbation?
    • Only the final user-interface font
    • Only a previously fixed output screenshot
    • Only the displayed model name
    • The training data or learning process
  8. What reference makes a content hash useful against the cited split-view poisoning threat?
    • A fresh hash supplied solely by the attacker alongside the changed resource
    • A trusted hash of the raw resource obtained before the malicious change
    • Only an unchanged URL string
    • A requirement that the resource keep the same file extension