Backdoor Invalidator combines Gaussian filtering, complementary learning, and trigger mix-up to reduce backdoor attack success in semi-supervised image classifiers from 84.7% to 1.8% average while mostly preserving clean accuracy.
Rademacher and gaussian complexities: Risk bounds and structural results
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.LG 1years
2025 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
Filter, Obstruct and Dilute: Defending Against Backdoor Attacks on Semi-Supervised Learning
Backdoor Invalidator combines Gaussian filtering, complementary learning, and trigger mix-up to reduce backdoor attack success in semi-supervised image classifiers from 84.7% to 1.8% average while mostly preserving clean accuracy.