Training a backdoored model with SAM instead of vanilla SGD amplifies backdoor-related neuron responses, making poisoned samples more detectable by existing methods.
Lira: Learnable, imperceptible and robust backdoor attacks
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CV 1years
2024 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
Reliable Poisoned Sample Detection against Backdoor Attacks Enhanced by Sharpness Aware Minimization
Training a backdoored model with SAM instead of vanilla SGD amplifies backdoor-related neuron responses, making poisoned samples more detectable by existing methods.