Overview
Syllabus
Intro
Big Data Revolution: Changing Landscape
Challenges for Big Data
Other Approach: Use Hardware Support for Efficient Oblivious Data Processing
How to Support Data Obliviousness ??
Support for Basic Data Science
Experimental Evaluation
Comparison with ObliVM
Federated Learning: Privacy vs Robustness
Backdoor Attacks in FL context
Overview
Experiments
Comparison with Other Defenses - IID
Conclusion: FL Poisoning Attacks
Attacking models to improve privacy and fairness
Example: Attacking Image Classifiers
Domain constraint Example
Example: Prevent Gender Prediction
Change Images Using Glasses
Questions?
Taught by
CAE in Cybersecurity Community