The Hammer and the Nut: Is Bilevel Optimization Really Needed to Poison Linear Classifiers?

Antonio Emanuele Cinà, Sebastiano Vascon, Ambra Demontis +3

One of the most concerning threats for modern AI systems is data poisoning, where the attacker injects maliciously crafted training data to corrupt the system's behavior at test ti…