Radioactive data: tracing through training

Understand

We want to detect whether a particular image dataset has been used to train a model.

• We propose a new technique, \emph{radioactive data}, that makes imperceptible changes to this dataset such that any model trained on it will bear an identifiable mark.
• The mark is robust to strong variations such as different architectures or optimization methods.
• Given a trained model, our technique detects the use of radioactive data and provides a level of confidence (p-value).