NeurIPS 2018poster1001 citations
Spectral Signatures in Backdoor Attacks
Brandon Tran, Jerry Li, Aleksander Madry
Abstract
A recent line of work has uncovered a new form of data poisoning: so-called backdoor attacks. These attacks are particularly dangerous because they do not affect a network's behavior on typical, benign data. Rather, the network only deviates from its expected output when triggered by an adversary's planted perturbation.
BibTeX
@inproceedings{NEURIPS2018_280cf18b,
author = {Tran, Brandon and Li, Jerry and Madry, Aleksander},
booktitle = {Advances in Neural Information Processing Systems},
editor = {S. Bengio and H. Wallach and H. Larochelle and K. Grauman and N. Cesa-Bianchi and R. Garnett},
pages = {},
publisher = {Curran Associates, Inc.},
title = {Spectral Signatures in Backdoor Attacks},
url = {https://proceedings.neurips.cc/paper_files/paper/2018/file/280cf18baf4311c92aa5a042336587d3-Paper.pdf},
volume = {31},
year = {2018}
}