A new Backdoor Attack in CNNs by training set corruption without label poisoning

Mauro Barni, Kassem Kallas, Benedetta Tondi

Backdoor attacks against CNNs represent a new threat against deep learning systems, due to the possibility of corrupting the training set so to induce an incorrect behaviour at tes…