Trojan Detection Software Challenge - image-classification-aug2020-train
收藏资源简介：
The data being generated and disseminated is the training data used to construct trojan detection software solutions. This data, generated at NIST, consists of human level AIs trained to perform image classification. A known percentage of these trained AI models have been poisoned with a known trigger which induces incorrect behavior. This data will be used to develop software solutions for detecting which trained AI models have been poisoned via embedded triggers. This dataset consists of 1104 trained, human level, image classification AI models using a variety of model architectures. The models were trained on synthetically created image data of non-real traffic signs superimposed on road background scenes. Half (50%) of the models have been poisoned with an embedded trigger which causes misclassification of the images when the trigger is present.
本次生成并发布的数据，为用于构建AI后门检测软件方案的训练数据集。该数据集由美国国家标准与技术研究院（National Institute of Standards and Technology，NIST）生成，包含经训练可完成图像分类任务的人类级AI（human-level AI）模型。其中既定比例的已训练AI模型，已通过已知触发标记实施投毒，使其产生错误预测行为。本数据集将用于开发软件方案，以检测哪些已训练AI模型已通过嵌入式触发标记遭受投毒。本次数据集共包含1104个经训练的人类级图像分类AI模型，涵盖多种模型架构。这些模型的训练数据为将非真实交通标志叠加于道路背景场景后生成的合成图像数据。其中半数（50%）的模型已通过嵌入式触发标记实施投毒，当触发标记出现时，会导致模型对图像产生误分类。
