Imperceptible Sample-Specific Backdoor to DNN with Denoising Autoencoder

Xiangqi Wang, Mingfu Xue, Kewei Chen +4

The backdoor attack poses a new security threat to deep neural networks. Existing backdoor often relies on visible universal trigger to make the backdoored model malfunction, which…