Poison Ink: Robust and Invisible Backdoor Attack — mentioned by belter

Fri, 06 Aug 2021 15:36:58 GMT

https://arxiv.org/pdf/2108.02488.pdf "...most existing backdoor attack methods are either visible or fragile to some effortless pre-processing such as common data transformations. To address these limitations, we propose a robust and invisible backdoor attack called ``Poison Ink''. Concretely, we first leverage the image structures as target poisoning areas, and fill them with poison ink (information) to generate the trigger pattern. As the image structure can keep its semantic meaning during the data transformation, such trigger pattern is inherently robust to data transformations. Then we…

Paper and discussion history. A mention is not an endorsement.

Poison Ink: Robust and Invisible Backdoor Attack — HN submission

Fri, 06 Aug 2021 15:36:58 GMT

Poison Ink: Robust and Invisible Backdoor Attack

2 points; 1 discussion reply on HN. Paper and source history. A submission is not an endorsement.

Poison Ink: Robust and Invisible Backdoor Attack · HackerPapers discussions

Poison Ink: Robust and Invisible Backdoor Attack — mentioned by belter

Poison Ink: Robust and Invisible Backdoor Attack — HN submission