Tristan Malatynski

Statistical Adversaries: Natural Backdoor-like Adversarial Features in Clean Vision Datasets

It is concluded that ordinary datasets can contain exploitable adversarial surfaces even in the absence of poisoning, and suggested that dataset audits should treat spurious structure not only as a source of bias or interpretability failure, but also as a latent attack surface for vision models.