Towards A Critical Evaluation of Robustness for Deep Learning Backdoor Countermeasures. (arXiv:2204.06273v1 [cs.CR])

Since Deep Learning (DL) backdoor attacks have been revealed as one of the
most insidious adversarial attacks, a number of countermeasures have been
developed with certain assumptions defined in their respective threat models.
However, the robustness of these countermeasures is inadvertently ignored,
which can introduce severe consequences, e.g., a countermeasure can be misused
and result in a false implication of backdoor detection.

For the first time, we critically examine the robustness of existing backdoor
countermeasures with an initial focus on …

backdoor countermeasures critical deep learning