CEPA: Consensus Embedded Perturbation for Agnostic Detection and Inversion of Backdoors

Guangmingmei Yang, Xi Li, Hang Wang +2

A variety of defenses have been proposed against Trojans planted in (backdoor attacks on) deep neural network (DNN) classifiers. Backdoor-agnostic methods seek to reliably detect a…