Stanford
University
  • Stanford Home
  • Maps & Directions
  • Search Stanford
  • Emergency Info
  • Terms of Use
  • Privacy
  • Copyright
  • Trademarks
  • Non-Discrimination
  • Accessibility
© Stanford University.  Stanford, California 94305.

What is an Adversarial Distillation Attack?

An Adversarial Distillation Attack is when an attacker deliberately interferes with the process of training a smaller AI using a larger, more powerful one. By manipulating what the smaller model learns, the attacker can cause it to make specific mistakes, develop security weaknesses, or behave in misleading or harmful ways. The resulting model may appear to work normally, making the damage difficult to detect.


What is an Adversarial Distillation Attack? | Stanford HAI

Explore Similar Terms:

AI Safety | Data Poisoning | Knowledge Distillation

See Full List of Terms & Definitions

Skip to content
  • About

    • About
    • People
    • Get Involved with HAI
    • Support HAI
    • Subscribe to Email
  • Research

    • Research
    • Research Programs
    • Grants
    • Marlowe (opens in new tab)
    • Student Affinity Groups
    • Centers & Labs
    • Research Publications
    • Research Partners
  • Education

    • Education
    • Executive and Professional Education
    • Government and Policymakers
    • K-12
    • Stanford Students
  • Policy

    • Policy
    • Policy Publications
    • Policymaker Education
    • Student Opportunities
  • AI Index

    • AI Index
    • AI Index Report
    • Global Vibrancy Tool
    • People
  • News
  • Events
  • Industry
  • Centers & Labs

Stay Up To Date

Get the latest news, advances in research, policy work, and education program updates from HAI in your inbox weekly.

Sign Up For Latest News

Navigate
  • About
  • Events
  • AI Glossary
  • Careers
  • Search
Participate
  • Get Involved
  • Support HAI
  • Contact Us

Enroll in a Human-Centered AI Course

This AI program covers technical fundamentals, business implications, and societal considerations.