arXiv: cs.AI preprintsInternational6 November 2026
How to Backdoor Image Knowledge Distillation
This is an official announcement record
Firsthand records what arXiv: cs.AI preprints announced and links to the original. The wording below is theirs, not ours.
arXiv:2504.21323v5 Announce Type: replace-cross Abstract: Knowledge distillation is widely used to transfer behavior from a large teacher model to a smaller student. It is often assumed to be safe when the teacher is clean, because classic backdoor attacks rely on poisoned labels and triggers in supervised training, whereas distillation trains the student to match a teacher's outputs. We show that this assumption can fail when the distillation dataset itself is poisoned. Our attack injects triggered and manipulated images that a clean teacher already predicts as an attacker chosen target label
Read the official announcement
Opens arxiv.org
More from arXiv: cs.AI preprints
- Formalizing inverse problems in the age of AI: possibilities, pitfalls, and an invitation6 November 2026
- KDASO: Knowledge-Data Dual-Driven Automated Skill Optimization for Liability Adjudication Tasks6 November 2026
- BlockLock: Reproducible LLM Inference with Fixed Batch Geometry6 November 2026
- Resource-Efficient Reinforcement Learning Post-Training through Elastic Expert Parallelism6 November 2026
- The Two-Ledger Model: Transaction-Grain Cost Accounting for Multi-Agent AI Systems Across Clouds, Models, and Systems of Record6 November 2026
This content is for informational purposes only and is not professional advice. Specifications, prices, plan tiers, and features change frequently and may differ from what is shown here; verify current details on the manufacturer's or company's official page before purchasing. Ratings are based on analysis of published documentation, not independent lab testing.