Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks — mentioned by ianbutler

Wed, 03 May 2023 20:47:44 GMT

I believe you are correct, I worked on a summer research project at NYU in 2018 based on https://arxiv.org/abs/1805.12185 As part of that project I constructed an API that took a small dataset and a model, launched a K8s pod and ran something like this from the paper: > The pruning defense works as follows: the defender exercises the DNN received from the attacker with clean inputs from the validation dataset, D_valid, and records the average activation of each neuron. The defender then iteratively prunes neurons from the DNN in increasing order of average activations and records the accuracy…

Paper and discussion history. A mention is not an endorsement.

Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks · HackerPapers discussions

Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks — mentioned by ianbutler