A targeted contamination attack using cover images evades prior backdoor defenses, and a likelihood-ratio test on decomposed representations reliably detects the poisoned class.
ZOO: zeroth order optimization based black-box attacks to deep neural networks with- out training substitute models
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CR 1years
2019 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
Demon in the Variant: Statistical Analysis of DNNs for Robust Backdoor Contamination Detection
A targeted contamination attack using cover images evades prior backdoor defenses, and a likelihood-ratio test on decomposed representations reliably detects the poisoned class.