Detecting Trojaned DNNs Using Counterfactual Attributions

Karan Sikka, Indranil Sur, Susmit Jha +2

We target the problem of detecting Trojans or backdoors in DNNs. Such models behave normally with typical inputs but produce specific incorrect predictions for inputs poisoned with…