Detecting Data Poisoning Attacks in Image Datasets Using a Vision-Language Hybrid Pipeline

Image classification systems play a crucial role in real-world applications. However, these systems are vulnerable to data poisoning attacks, where attackers manipulate training data to degrade model accuracy. Existing defenses often struggle to detect manipulations. In this work, we build on a prior model, DynaDetect2.0, which uses Convolutional Neural Network (CNN) based feature extraction and statistical outlier detection. We extend this framework by integrating a Vision Language Model (VLM) to support semantic reasoning during detection. The VLM operates at two stages: it first pre-screens image-label pairs for semantic alignment and later provides natural-language explanations for samples flagged by statistical methods. This hybrid approach combines statistical rigor with semantic interpretability. We evaluate the proposed method using the Imagenette-160 and CIFAR-100 datasets with both clean and poisoned data. Results show that our VLM-assisted detection reduces false positives and improves the identification of mislabeled or anomalous data compared to statistical models alone.

Authors

Publication Details

Journal
ScholarSpace (University of Hawaii at Manoa)
Published
2025-12-23
Primary Topic
Adversarial Robustness in Machine Learning
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Detecting Data Poisoning Attacks in Image Datasets Using a Vision-Language Hybrid Pipeline

Yili Jiang, Sabrina Perry, Charles Walter, Sam Perry
ScholarSpace (University of Hawaii at Manoa)
Adversarial Robustness in Machine Learning
article

Detecting Data Poisoning Attacks in Image Datasets Using a Vision-Language Hybrid Pipeline

Yili Jiang, Sabrina Perry, Charles Walter, Sam Perry
article en

Abstract

Image classification systems play a crucial role in real-world applications. However, these systems are vulnerable to data poisoning attacks, where attackers manipulate training data to degrade model accuracy. Existing defenses often struggle to detect manipulations. In this work, we build on a prior model, DynaDetect2.0, which uses Convolutional Neural Network (CNN) based feature extraction and statistical outlier detection. We extend this framework by integrating a Vision Language Model (VLM) to support semantic reasoning during detection. The VLM operates at two stages: it first pre-screens image-label pairs for semantic alignment and later provides natural-language explanations for samples flagged by statistical methods. This hybrid approach combines statistical rigor with semantic interpretability. We evaluate the proposed method using the Imagenette-160 and CIFAR-100 datasets with both clean and poisoned data. Results show that our VLM-assisted detection reduces false positives and improves the identification of mislabeled or anomalous data compared to statistical models alone.

ScholarSpace (University of Hawaii at Manoa)
Openalex Percentile: Top 18%
Adversarial Robustness in Machine Learning
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.

Detecting Data Poisoning Attacks in Image Datasets Using a Vision-Language Hybrid Pipeline — Yili Jiang, Sabrina Perry, et al. · ScholarSpace (University of Hawaii at Manoa) (2025) | TGRS Research Map | TGRS