Guangmingmei Yang

Strong evasive backdoor attacks and an ensemble defense

This work introduces an ensemble defense that consolidates the complementary strengths of individual detectors, making the detection system more backdoor mechanism‐agnostic, and also providing backdoor inversion, which offers insights into the nature of the detected attack.