Round 3 Test DatasetThe data being generated and disseminated is the training data used to construct trojan detection software solutions. This data, generated at NIST, consists of human level AIs trained to perform image classification. A known percentage of these trained AI models have been poisoned with a known trigger which induces incorrect behavior. This data will be used to develop software solutions for detecting which trained AI models have been poisoned via embedded triggers. This dataset consists of 288 adversarially trained, human level, image classification AI models using a variety of model architectures. The models were trained on synthetically created image data of non-real traffic signs superimposed on road background scenes. Half (50%) of the models have been poisoned with an embedded trigger which causes misclassification of the images when the trigger is present.
About this Dataset
| Title | Trojan Detection Software Challenge - image-classification-dec2020-test |
|---|---|
| Description | Round 3 Test DatasetThe data being generated and disseminated is the training data used to construct trojan detection software solutions. This data, generated at NIST, consists of human level AIs trained to perform image classification. A known percentage of these trained AI models have been poisoned with a known trigger which induces incorrect behavior. This data will be used to develop software solutions for detecting which trained AI models have been poisoned via embedded triggers. This dataset consists of 288 adversarially trained, human level, image classification AI models using a variety of model architectures. The models were trained on synthetically created image data of non-real traffic signs superimposed on road background scenes. Half (50%) of the models have been poisoned with an embedded trigger which causes misclassification of the images when the trigger is present. |
| Modified | 2020-10-20 00:00:00 |
| Publisher Name | National Institute of Standards and Technology |
| Contact | mailto:[email protected] |
| Keywords | Trojan Detection; Artificial Intelligence; AI; Machine Learning; Adversarial Machine Learning; |
{
"identifier": "ark:\/88434\/mds2-2341",
"accessLevel": "public",
"contactPoint": {
"hasEmail": "mailto:[email protected]",
"fn": "Michael Paul Majurski"
},
"programCode": [
"006:045"
],
"landingPage": "https:\/\/data.nist.gov\/od\/id\/mds2-2341",
"title": "Trojan Detection Software Challenge - image-classification-dec2020-test",
"description": "Round 3 Test DatasetThe data being generated and disseminated is the training data used to construct trojan detection software solutions. This data, generated at NIST, consists of human level AIs trained to perform image classification. A known percentage of these trained AI models have been poisoned with a known trigger which induces incorrect behavior. This data will be used to develop software solutions for detecting which trained AI models have been poisoned via embedded triggers. This dataset consists of 288 adversarially trained, human level, image classification AI models using a variety of model architectures. The models were trained on synthetically created image data of non-real traffic signs superimposed on road background scenes. Half (50%) of the models have been poisoned with an embedded trigger which causes misclassification of the images when the trigger is present.",
"language": [
"en"
],
"distribution": [
{
"accessURL": "https:\/\/drive.google.com\/drive\/folders\/1BWmi4q5bTwVpEmIhNBodR3aQLOL-FTFh?usp=drive_link",
"title": "image-classification-dec2020-test"
}
],
"bureauCode": [
"006:55"
],
"modified": "2020-10-20 00:00:00",
"publisher": {
"@type": "org:Organization",
"name": "National Institute of Standards and Technology"
},
"theme": [
"Information Technology:Software research",
"Information Technology:Cybersecurity",
"Information Technology:Computational science"
],
"keyword": [
"Trojan Detection; Artificial Intelligence; AI; Machine Learning; Adversarial Machine Learning;"
]
}
