Sunayana Samavedam

Prototype Guided Backdoor Defense via Activation Space Manipulation

Deep learning models are susceptible to backdoor attacks involving malicious perturbation of some training data with a trigger to force misclassification to a target class. Various triggers have been used including semantic triggers that are easily realizable. We present Prototype Guided Backd…