Unlearn to Relearn Backdoors: Deferred Backdoor Functionality Attacks on Deep Learning Models

Jeongjin Shin, Sangdon Park

Deep learning models are vulnerable to backdoor attacks, where adversaries inject malicious functionality during training that activates on trigger inputs at inference time. Extens…