Excess Capacity and Backdoor Poisoning

Naren Sarayu Manoj, Avrim Blum

A backdoor data poisoning attack is an adversarial attack wherein the attacker injects several watermarked, mislabeled training examples into a training set. The watermark does not…