Towards Understanding How Self-training Tolerates Data Backdoor Poisoning

Soumyadeep Pal, Ren Wang, Yuguang Yao +1

Recent studies on backdoor attacks in model training have shown that polluting a small portion of training data is sufficient to produce incorrect manipulated predictions on poison…