Cheng-Hsin Weng

On the Trade-off between Adversarial and Backdoor Robustness

Deep neural networks are shown to be susceptible to both adversarial attacks and backdoor attacks. Although many defenses against an individual type of the above attacks have been proposed, the interactions between the vulnerabilities of a network to both types of attacks have not been carefully inv…