Backdoor

A new method for safely and robustly injecting watermark after training without training data.

We uncover the security risk of data-free distillation from a poisoned teacher and propose the first countermeasure.

Deep neural networks (DNNs) are vulnerable to backdoor attacks. Previous works have shown it extremely challenging to unlearn the undesired backdoor behavior from the network, since the entire network can be affected by the backdoor samples. In this …