Asia
959ab9a0695c467e7caf75431a872e5c-Paper.pdf
The data-driven nature of modern machine learning (ML) training routines puts pressure on data supply pipelines, which become increasingly more complex. It is common to find separate disks or whole content distribution networks dedicated to servicing massive datasets. Training is often distributed across multiple workers. This emergent complexity gives a perfect opportunity for an attackertodisrupt ML training, while remaining covert.