SATBA: An Invisible Backdoor Attack Based On Spatial Attention

arXiv:2302.13056v3 Announce Type: replace
Abstract: Backdoor attack has emerged as a novel and concerning threat to AI security. These attacks involve the training of Deep Neural Network (DNN) on datasets that contain hidden trigger patterns. Although the poisoned model behaves normally on benign samples, it exhibits abnormal behavior on samples containing the trigger pattern. However, most existing backdoor attacks suffer from two significant drawbacks: their trigger patterns are visible and easy to detect by backdoor defense or even human inspection, …

abnormal ai security arxiv attack attacks attention backdoor backdoor attack cs.cr cs.cv datasets hidden network neural network novel patterns security threat training trigger