Renjie Wan

Spy-Watermark: Robust Invisible Watermarking for Backdoor Attack

2024 · arXiv (Cornell University)

Backdoor attack aims to deceive a victim model when facing backdoor instances while maintaining its performance on benign data. Current methods use manual patterns or special perturbations as triggers, while they often overlook the robustness …