MLSys Seminar Episode 75: Nicholas Carlini

[Dan Fu]

Hi everyone,

We're back with episode seventy-five of the MLSys Seminar this Wednesday from 3:30-4:20pm PT. 

We'll be joined by Nicholas Carlini, who will be talking about practical data poisoning techniques for web-scale training datasets.

Livestream Link: https://www.youtube.com/watch?v=h9jf1ikcGyk

Guest: Nicholas Carlini

Title: Poisoning Web-Scale Training Datasets is Practical

Abstract: In this talk I introduce the first practical poisoning attack on large machine learning datasets. With our attack I could have poisoned (but didn't!) the training dataset for anyone who has used LAION-400M in the last six months. While we take steps to mitigate these attacks, they come at a (sometimes significant) cost to utility.  Addressing these challenges will require new categories of defenses to simultaneously allow models to train on large datasets while also being robust to adversarial training data.

Bio: Nicholas Carlini is a research scientist at Google Brain. He studies the security and privacy of machine learning, for which he has received best paper awards at ICML, USENIX Security and IEEE S&P. He obtained his PhD from the University of California, Berkeley in 2018.

See you all there!

Best,

Dan

[Dan Fu]

We're live with Nicholas in 10 minutes!

Dan