Backdoor Attack in the Physical World

Yiming Li, Tongqing Zhai, Yong Jiang +2

Backdoor attack intends to inject hidden backdoor into the deep neural networks (DNNs), such that the prediction of infected models will be maliciously changed if the hidden backdo…