Ulugbek Abdimanabov

Safety-Efficacy Trade Off: Robustness against Data-Poisoning

Backdoor and data-poisoning attacks can achieve high attack success while evading existing spectral and optimisation-based defences. We show that this behaviour is not incidental, but arises from a fundamental geometric mechanism in input space. Using kernel ridge regression as an exact model of wid…