Strong evasive backdoor attacks and an ensemble defense
This work introduces an ensemble defense that consolidates the complementary strengths of individual detectors, making the detection system more backdoor mechanism‐agnostic, and also providing backdoor inversion, which offers insights into the nature of the detected attack.