An Adaptive Black-box Defense against Trojan Attacks (TrojDef)

Guanxiong Liu, Abdallah Khreishah, Fatima Sharadgah +1

Trojan backdoor is a poisoning attack against Neural Network (NN) classifiers in which adversaries try to exploit the (highly desirable) model reuse property to implant Trojans int…