Hanfeng Xia

CBPF: Filtering Poisoned Data Based on Composite Backdoor Attack

2024 · arXiv (Cornell University)

Backdoor attacks involve the injection of a limited quantity of poisoned examples containing triggers into the training dataset. During the inference stage, backdoor attacks can uphold a high level of accuracy for normal examples, yet …