Seal Your Backdoor with Variational Defense

Ivan Sabolić, Matej Grcić, Siniša Šegvić

We propose VIBE, a model-agnostic framework that trains classifiers resilient to backdoor attacks. The key concept behind our approach is to treat malicious inputs and corrupted la…