Chentao Jia

SampDetox: Black-box Backdoor Defense via Perturbation-based Sample Detoxification

The advancement of Machine Learning has enabled the widespread deployment of Machine Learning as a Service (MLaaS) applications. However, the untrustworthy nature of third-party ML services poses backdoor threats. Existing defenses in MLaaS are limited by their reliance on training samples or white-…