Towards Stable Backdoor Purification through Feature Shift Tuning

Rui Min, Zeyu Qin, Li Shen +1

It has been widely observed that deep neural networks (DNN) are vulnerable to backdoor attacks where attackers could manipulate the model behavior maliciously by tampering with a s…