Quiet Triggers, Loud Footprints: A Tri-Space Measurement Study of Backdoor Stealthiness

Behrad Tajalli, Henk Berendsen, Xiaoyun Xu +1

Backdoor attacks on deep neural networks are commonly evaluated by attack success rate and benign accuracy, yet their stealthiness remains inconsistently defined and measured. Exis…