Protecting Publicly Available Data With Machine Learning Shortcuts


Nicolas M Müller (Fraunhofer AISEC),* Maximilian Burgert (TU Munich), Pascal Debus (Fraunhofer AISEC), Jennifer Williams (University of Southampton), Philip Sperl (Fraunhofer AISEC), Konstantin Böttinger (Fraunhofer AISEC)
The 34th British Machine Vision Conference

Abstract

Machine-learning (ML) shortcuts or spurious correlations are artifacts in datasets that lead to very good training and test performance but severely limit the model's generalization capability. Such shortcuts are insidious because they go unnoticed due to good in-domain test performance. In this paper, we explore the influence of different shortcuts and show that even simple shortcuts are difficult to detect by explainable AI methods. We then exploit this fact and design an approach to defend online databases against crawlers: providers such as dating platforms, clothing manufacturers, or used car dealers have to deal with a professionalized crawling industry that grabs and resells data points on a large scale. We show that a deterrent can be created by deliberately adding ML shortcuts. Such augmented datasets are then unusable for ML use cases, which deters crawlers and the unauthorized use of data from the internet. Using real-world data from three use cases, we show that the proposed approach renders such collected data unusable, while the shortcut is at the same time difficult to notice in human perception. Thus, our proposed approach can serve as a proactive protection against illegitimate data crawling.

Video



Citation

@inproceedings{Müller_2023_BMVC,
author    = {Nicolas M Müller and Maximilian Burgert and Pascal Debus and Jennifer Williams and Philip Sperl and Konstantin Böttinger},
title     = {Protecting Publicly Available Data With Machine Learning Shortcuts},
booktitle = {34th British Machine Vision Conference 2023, {BMVC} 2023, Aberdeen, UK, November 20-24, 2023},
publisher = {BMVA},
year      = {2023},
url       = {https://papers.bmvc2023.org/0685.pdf}
}


Copyright © 2023 The British Machine Vision Association and Society for Pattern Recognition
The British Machine Vision Conference is organised by The British Machine Vision Association and Society for Pattern Recognition. The Association is a Company limited by guarantee, No.2543446, and a non-profit-making body, registered in England and Wales as Charity No.1002307 (Registered Office: Dept. of Computer Science, Durham University, South Road, Durham, DH1 3LE, UK).

Imprint | Data Protection