2026
Breaking the Stealth-Potency Trade-off in Clean-Image Backdoors with Generative Trigger Optimization
AAAI 2026technical
Clean-image backdoor attacks, which use only label manipulation in training datasets to compromise deep neural networks, pose a significant threat to security-critical applications. A critical flaw in existing methods is that the poison rate required for a successful attack induces a proportional, a