Melinda Sun

Incompatibility Clustering as a Defense Against Backdoor Poisoning Attacks

We propose a novel clustering mechanism based on an incompatibility property between subsets of data that emerges during model training. This mechanism partitions the dataset into subsets that generalize only to themselves, i.e., training on one subset does not improve performance on the other subse…