Backdoor defense, learnability and obfuscation

Paul Christiano, Jacob Hilton, Victor Lecomte +1

We introduce a formal notion of defendability against backdoors using a game between an attacker and a defender. In this game, the attacker modifies a function to behave differentl…