Skip to main content

Training data poisoning detection and simulation — BadNets, Trojan, clean-label attacks, spectral signatures, activation clustering, STRIP defence

Project description

☠️ NullSec DataPoisoning

Training Data Poisoning Detection & Simulation

Python License NullSec

Detect, simulate, and defend against training data poisoning attacks


🎯 Overview

NullSec DataPoisoning provides tools for detecting and simulating data poisoning attacks against machine learning pipelines. It implements backdoor injection (BadNets, Trojaning), clean-label attacks, and gradient-based poisoning, alongside detection methods like spectral signatures, activation clustering, and STRIP.

⚡ Features

Feature Description
Backdoor Injection BadNets, Trojan, blend, and warp triggers
Clean-Label Attacks Feature collision, convex polytope, Witches' Brew
Detection Engine Spectral signatures, activation clustering, STRIP
Neural Cleanse Reverse-engineer trigger patterns from poisoned models
Dataset Audit Scan datasets for anomalous samples and label flips
Pipeline Scanner Audit ML pipelines for poisoning entry points

📋 Attack & Defence Matrix

Technique Category Type
BadNets Backdoor Attack
Trojan Attack Backdoor Attack
Clean-Label FC Poisoning Attack
Witches' Brew Poisoning Attack
Spectral Signatures Statistical Defence
Activation Clustering Neural Defence
STRIP Runtime Defence
Neural Cleanse Reverse Engineering Defence

🚀 Quick Start

# Scan a dataset for poisoning indicators
nullsec-datapoisoning scan --dataset training_data/ --model model.pt

# Simulate backdoor attack
nullsec-datapoisoning inject --dataset clean.csv --trigger patch --target-label 0 --poison-rate 0.01

# Run Neural Cleanse detection
nullsec-datapoisoning cleanse --model suspect_model.pt --num-classes 10

# Audit an ML pipeline config
nullsec-datapoisoning audit --pipeline pipeline.yaml

🔗 Related Projects

Project Description
nullsec-adversarial Adversarial ML attack toolkit
nullsec-modelaudit ML model security auditing
nullsec-llmred LLM red-teaming framework
nullsec-promptinject Prompt injection payloads
nullsec-linux Security Linux distro (140+ tools)

⚠️ Legal

For authorized ML security research only. Poisoning production training data without authorization is illegal.

📜 License

MIT License — @bad-antics


Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

nullsec_datapoisoning-0.1.0.tar.gz (10.0 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

nullsec_datapoisoning-0.1.0-py3-none-any.whl (10.1 kB view details)

Uploaded Python 3

File details

Details for the file nullsec_datapoisoning-0.1.0.tar.gz.

File metadata

  • Download URL: nullsec_datapoisoning-0.1.0.tar.gz
  • Upload date:
  • Size: 10.0 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.13.5

File hashes

Hashes for nullsec_datapoisoning-0.1.0.tar.gz
Algorithm Hash digest
SHA256 94f12895d1fddfd7b43c6d695a3bb6558771c439de238d2f4805becae01ff669
MD5 812449ad5ddd383d5c0f91959e39ee6c
BLAKE2b-256 baa6cac269eefc5d121aad4ecae206f6a39ad67478fcafb4e55c3397648f1c89

See more details on using hashes here.

File details

Details for the file nullsec_datapoisoning-0.1.0-py3-none-any.whl.

File metadata

File hashes

Hashes for nullsec_datapoisoning-0.1.0-py3-none-any.whl
Algorithm Hash digest
SHA256 3b3b2085816617d286acdf55b7bfa09b3470f451784cf124235b51e64a597954
MD5 7615395d1b2f590add97d6e24416368f
BLAKE2b-256 484026db6a43c53b011be4ee9878caaf16da0ec277335df6f40d86a7733a434a

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page