A post-training backdoor detector for DNN image classifiers that reverse-engineers minimal class-confusing perturbations for every class pair and flags anomalous pairs via an order-statistic hypothesis test.
Title resolution pending
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.LG 1years
2019 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
Detection of Backdoors in Trained Classifiers Without Access to the Training Set
A post-training backdoor detector for DNN image classifiers that reverse-engineers minimal class-confusing perturbations for every class pair and flags anomalous pairs via an order-statistic hypothesis test.