TraceGuard: Adaptive Multimodal Poison Filtering through Cross-Feature Rank Agreement
Multimodal training relies on image-text corpora collected from external sources, creating opportunities for attackers to poison the data. Stealthy attacks can preserve plausible image-text pairs while concealing the differences used by detectors, so apparently clean data can still redirect the trained model. We theref...
Hao-Yang Li, Ya-Xin Xiao, Lin-Yan Dai et al.
· 0 citations