On the Permanence of Backdoors in Evolving Models

Huiying Li, Arjun Nitin Bhagoji, Yuxin Chen +2

Existing research on training-time attacks for deep neural networks (DNNs), such as backdoors, largely assume that models are static once trained, and hidden backdoors trained into…