Paper on Model-free Label-flipping Attack & Synthetic Reduced Nearest Neighbor model

• Post by: admin
• February 22, 2021
• Comments off

Proposed a novel model-free label-flipping attack based on the multi-modality of the data and a novel defense technique based on the Synthetic Reduced Nearest Neighbor (SRNN) model. A preprint copy of this paper titled “Adversarial Poisoning Attacks and Defense for General Multi-Class Models Based On Synthetic Reduced Nearest Neighbors” is available here.