Certified Robustness to Clean-Label Poisoning Using Diffusion Denoising

Sanghyun Hong, Nicholas Carlini, Alexey Kurakin

We present a certified defense to clean-label poisoning attacks under ${\ell }_2$-norm. These attacks work by injecting a small number of poisoning samples (e.g., 1%) that contain bou…