Guang-Ming Lu

Advanced Cross-Attack Backdoor Detector Based on Disturbance Immunity Learned From Classic Backdoor Attacks

The aim of a backdoor attack is to manipulate the behavior of a DNN under trigger-activated conditions by poisoning the dataset. Most backdoor detectors can be regarded as feature clustering methods and struggle to detect trigger-injected samples owing to two factors: 1) Most detectors rely heavily on sufficient clean...