USENIX Security2024Top-tier venue
Verify your Labels! Trustworthy Predictions and Datasets via Confidence Scores
Torsten Krauß, Jasper Stang, Alexandra Dmitrienko
Abstract
Machine learning is a rapidly evolving technology with manifold benefits. At its core lies the mapping between samples and corresponding target labels (SL-Mappings). Such mappings can originate from labeled dataset samples or from prediction generated during model inference. The correctness of SL-Mappings is crucial, both during training and for model predictions, especially when considering poisoning attacks.
Existing standalone works from the dataset cleaning and prediction confidence scoring domains lack a dual-use tool offering an SL-Mappings score, which is impractical. Moreover, these works have drawbacks, e.g., dependence on specific model architectures and reliance on large datasets, which may not be accessible, or lack a meaningful confidence score.
In this paper, we introduce LabelTrust, a versatile tool designed to generate confidence scores for SL-Mappings. We propose pipelines facilitating dataset cleaning and confidence scoring, mitigating the limitations of existing standalone approaches from each domain. Thereby, LabelTrust leverages a Siamese network trained via few-shot learning, requiring minimal clean samples and is agnostic to datasets and model architectures. We demonstrate LabelTrust's efficacy in detecting poisoning attacks within samples and predictions alike, with a modest one-time training overhead of 34.56 seconds and an evaluation time of less than 1 second per SL-Mapping.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext 1b6b52c7-cc47-497b-b3c2-bd034a6f8d61Cited by top-tier papers1
Ask how each one uses itBuilds on5
- Confidence-Aware Learning for Deep Neural NetworksJooyoung Moon, Jihyo Kim, Younghak Shin, Sangheum HwangICML 2020 · 184 citations
- Trap and Replace: Defending Backdoor Attacks by Trapping Them into an Easy-to-Replace SubnetworkHaotao Wang, Junyuan Hong, Aston Zhang, Jiayu Zhou et al.NeurIPS 2022 · 20 citations
- Learning to Predict Trustworthiness with Steep Slope LossYan Luo, Yongkang Wong, Mohan S. Kankanhalli, Qi ZhaoNeurIPS 2021 · 17 citations
- ASSET: Robust Backdoor Data Detection Across a Multiplicity of Deep Learning ParadigmsMinzhou Pan, Yi Zeng, Lingjuan Lyu, Xue Lin et al.USENIX Security 2023
- Backdoor Defense via Adaptively Splitting Poisoned DatasetKuofeng Gao, Yang Bai, Jindong Gu, Yong Yang et al.CVPR 2023
Related papers
- PoisonSpot: Precise Spotting of Clean-Label Backdoors via Fine-Grained Training Provenance TrackingPhilemon Hailemariam, Birhanu EsheteCCS 2025
- The Perils of Learning From Unlabeled Data: Backdoor Attacks on Semi-supervised LearningVirat Shejwalkar, Lingjuan Lyu, Amir HoumansadrICCV 2023 · 15 citations
- Chameleon: Increasing Label-Only Membership Leakage with Adaptive PoisoningHarsh Chaudhari, Giorgio Severi, Alina Oprea, Jonathan R. UllmanICLR 2024 · 8 citations
- On Robustness of Linear Classifiers to Targeted Data PoisoningNakshatra Gupta, Sumanth Prabhu S, Supratik Chakraborty, R. VenkateshAAAI 2026
- Explanation-Guided Backdoor Poisoning Attacks Against Malware ClassifiersGiorgio Severi, Jim Meyer, Scott E. Coull, Alina OpreaUSENIX Security 2021 · 186 citations
