arXiv AI

Anchoring Bias: A Persistent Fairness Backdoor Attack against MLLMs under Continual Learning

arXiv AI
3d ago

Time to Fake It: Continual Machine Learning Intensifies Unfairness in Deepfake Detection

The paper examines how continual learning (CL) techniques used to update deepfake detectors over time affect fairness across different demographic groups. By training detectors on a chronological series of 11 real-world deepfake generation methods, the authors track four fairness dimensions and find that accuracy loss often worsens unfairness, while fairness gains are rare. The study reveals that inequitable forgetting is linked to representation learning rather than mere underrepresentation, urging CL methods to consider social outcomes when balancing stability and plasticity.

By Kajaree Das, Oliver B\"ose, Subarnaduti Paul, Gabriel Storch, Martin Mundt
arXiv AI
Jul 1

Perturbation Effects on Robustness and Individual Fairness

arXiv:2404. 01356v4 Announce Type: replace-cross Abstract: Deep neural networks are vulnerable to adversarial perturbations that can simultaneously degrade prediction robustness and individual fairness across diverse application settings.

By Xuran Li, Hao Xue, Peng Wu, Xingjun Ma, Zhen Zhang, Huaming Chen, Flora D. Salim
arXiv Machine Learning
Jul 30

ToxScreen: Detecting Whether an LLM Has Been Poisoned

arXiv:2607. 26849v1 Announce Type: cross Abstract: As large language models (LLMs) are deployed in high-stakes domains, adversaries may poison training data to implant backdoors: hidden triggers that covertly manipulate model behavior at inference time.

By Anthony Hughes, Nicole Xing, Collin Francel, Andy Kim, Andrew Draganov
Hugging Face Trending Papers
Jul 29

ToxScreen: Detecting Whether an LLM Has Been Poisoned

As large language models (LLMs) are deployed in high-stakes domains, adversaries may poison training data to implant backdoors: hidden triggers that covertly manipulate model behavior at inference time. We ask whether a defender can recover such a trigger under realistic affordances, namely white-box access to the weights and knowledge of the behavior of concern, but no training data, no trusted reference model, no knowledge of the trigger, and no certainty that the model is poisoned.