{"work":{"id":"6b7221ce-154c-4e93-bdc4-fd4f65672799","openalex_id":null,"doi":null,"arxiv_id":"1912.02771","raw_key":null,"title":"Label-Consistent Backdoor Attacks","authors":null,"authors_text":"A","year":2019,"venue":"stat.ML","abstract":"Deep neural networks have been demonstrated to be vulnerable to backdoor attacks. Specifically, by injecting a small number of maliciously constructed inputs into the training set, an adversary is able to plant a backdoor into the trained model. This backdoor can then be activated during inference by a backdoor trigger to fully control the model's behavior. While such attacks are very effective, they crucially rely on the adversary injecting arbitrary inputs that are---often blatantly---mislabeled. Such samples would raise suspicion upon human inspection, potentially revealing the attack. Thus, for backdoor attacks to remain undetected, it is crucial that they maintain label-consistency---the condition that injected inputs are consistent with their labels. In this work, we leverage adversarial perturbations and generative models to execute efficient, yet label-consistent, backdoor attacks. Our approach is based on injecting inputs that appear plausible, yet are hard to classify, hence causing the model to rely on the (easier-to-learn) backdoor trigger.","external_url":"https://arxiv.org/abs/1912.02771","cited_by_count":null,"metadata_source":"pith","metadata_fetched_at":"2026-07-11T02:37:46.303787+00:00","pith_arxiv_id":"1912.02771","created_at":"2026-05-11T07:45:58.542463+00:00","updated_at":"2026-07-11T02:37:46.303787+00:00","title_quality_ok":true,"display_title":"Label-Consistent Backdoor Attacks, December 2019","render_title":"Label-Consistent Backdoor Attacks, December 2019"},"hub":{"state":{"work_id":"6b7221ce-154c-4e93-bdc4-fd4f65672799","tier":"hub","tier_reason":"10+ Pith inbound or 1,000+ external citations","pith_inbound_count":15,"external_cited_by_count":null,"distinct_field_count":3,"first_pith_cited_at":"2026-03-14T09:45:59+00:00","last_pith_cited_at":"2026-07-08T20:42:46+00:00","author_build_status":"not_needed","summary_status":"needed","contexts_status":"needed","graph_status":"needed","ask_index_status":"not_needed","reader_status":"not_needed","recognition_status":"not_needed","updated_at":"2026-08-16T01:29:55.499709+00:00","tier_text":"hub"},"tier":"hub","role_counts":[{"context_role":"background","n":1}],"polarity_counts":[{"context_polarity":"background","n":1}],"runs":{},"summary":{},"graph":{},"authors":[]}}