Chameleon: Backdoor Attacks With Restoration-Based Triggers Using Diffusion Models.
Chameleon is proposed, a backdoor attack framework that reformulates sample-specific trigger generation as the restoration of a salient masked region that achieves a 28.42% higher effective attack success rate (E-ASR) compared to the best baseline when averaged across all defenses.