data-poisoning1.tex

\documentclass[tikz,border=1cm]{standalone}
\begin{document}

\usetikzlibrary{shapes.geometric, math, positioning}

\definecolor{ACMRed}{RGB}{253, 27, 20}
\definecolor{ACMPurple}{RGB}{101, 1, 107}

\tikzmath{
\yHeader= 1.8;
}

\tikzset{%
	a/.style={
	thick
	},
	ar/.style={
	thick,
	color=ACMRed,
	},
	box/.style={
		rectangle,
		draw,
		rounded corners,
		minimum height=2em,
		text width=3.6em,
		text centered,
	},
	hl/.style={
		text=ACMRed,
	},
	hlout/.style={
		text=ACMRed,
		text width=10em,
	},
	database/.style={
      cylinder,
      shape border rotate=90,
      aspect=0.25,
      draw
    }
}

\begin{tikzpicture}[font=\small]

% Header
\node[text=ACMPurple] at (-3, \yHeader) {Training phase};
\node[text=ACMPurple] at (3, \yHeader) {Test phase};
\draw[dashed, thick, color=ACMPurple] (0, \yHeader + 0.1) to (0,-1.3);
\draw[dashed, thick, color=ACMPurple] (-6, 1.5) to (6,1.5);

% Training phase
\node[database] (db) at (-4.5,0) {Data};
\node[box] (model) at (-1,0){Model};
\node[hl, above = 0.5 of db] (pois) {Poisoning};
\node[below = 0.2 of db] {Training set};

\draw[a, ->] (db) -- (model) node[above, pos=0.5, text width=4.5em] {Training or update};
\draw[ar, ->] (pois) -- (db);

% Testing phase
\node[box] (bmodel) at (2,0) {Model (biased)};

\node[hlout, right= 0.5 of bmodel] (out2) {Error-generic attack};
\node[hlout, above= 0.2 of out2] (out1) {Degraded performance};
\node[hlout, below= 0.2 of out2] (out3) {Error-specific attack};
\node[] at (3,1.2) {Output};

\draw[a, ->] (0,0) -- (bmodel) node[pos=0.5, above] {Input};
\draw[ar, ->] (bmodel) -- (out1.west);
\draw[ar, ->] (bmodel) -- (out2.west);
\draw[ar, ->] (bmodel) -- (out3.west);
 
\end{tikzpicture}
\end{document}