<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);" class="elementToProof">
<span style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto;display:inline !important">This is an announcement of Sixiong Shan's MS Presentation</span><br style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto">
<span style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto;display:inline !important">===============================================</span><br style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto">
<span style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto;display:inline !important">Candidate: Sixiong Shan</span><br style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto">
<br style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto">
<span style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto;display:inline !important">Date: Friday, July 22, 2022</span><br style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto">
<br style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto">
<span style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto;display:inline !important">Time: 12:30 pm CST</span><br style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto">
<br style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto">
<span style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto;display:inline !important">Remote Location:<span class="Apple-converted-space"> </span></span><a href="https://urldefense.com/v3/__https://uchicago.zoom.us/j/6594501261?pwd=MVh4M3R4M0dPN1BaMUZBWDMrMnN1QT09__;!!BpyFHLRN4TMTrA!63006yW0f0Ujhnrtzw4zLb5X3KHJg-uynL8lc45sm-u7QIG96J9tSek83LURBr3FP2hojiA9uEVJdJ3QVvuS-8AyieXjp1G1vg$" style="font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto">https://urldefense.com/v3/__https://uchicago.zoom.us/j/6594501261?pwd=MVh4M3R4M0dPN1BaMUZBWDMrMnN1QT09__;!!BpyFHLRN4TMTrA!63006yW0f0Ujhnrtzw4zLb5X3KHJg-uynL8lc45sm-u7QIG96J9tSek83LURBr3FP2hojiA9uEVJdJ3QVvuS-8AyieXjp1G1vg$</a><br style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto">
<br style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto">
<span style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto;display:inline !important">Location: JCL 390</span><br style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto">
<br style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto">
<span style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto;display:inline !important">M.S. Paper Title: Poison Forensics: Traceback of Data Poisoning Attacks in Neural Networks</span><br style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto">
<br style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto">
<span style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto;display:inline !important">Abstract: In adversarial machine learning, new defenses against attacks on deep learning systems
are routinely broken soon after their release by more powerful attacks. In this context, forensic tools can offer a valuable complement to existing defenses, by tracing back a successful attack to its root cause, and offering a path forward for mitigation
to prevent similar attacks in the future. In this paper, we describe our efforts in developing a forensic traceback tool for poison attacks on deep neural networks. We propose a novel iterative clustering and pruning solution that trims "innocent" training
samples, until all that remains is the set of poisoned data responsible for the attack. Our method clusters training samples based on their impact on model parameters, then uses an efficient data unlearning method to prune innocent clusters. We empirically
demonstrate the efficacy of our system on three types of dirty-label (backdoor) poison attacks and three types of clean-label poison attacks, across domains of computer vision and malware classification. Our system achieves over 98.4% precision and 96.8% recall
across all attacks. We also show that our system is robust against four anti-forensics measures specifically designed to attack it.</span><br style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto">
<br style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto">
<span style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto;display:inline !important">Advisors: Ben Zhao and Heather Zheng</span><br style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto">
<br style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto">
<span style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto;display:inline !important">Committee Members: Ben Zhao, Heather Zheng, and Rana Hanocka</span><br style="caret-color:rgb(0, 0, 0);font-family:Helvetica;font-size:14.666666984558105px;font-weight:normal;orphans:auto;widows:auto">
<br>
</div>
</body>
</html>