Backdoor Attacks
-
Backdoor Attack on Neural Networks Detection: What Works
Backdoor detection splits into data, model and input checks. How spectral signatures, Neural Cleanse, STRIP and MNTD work, and where they fail.
-
Data Poisoning Attack Detection Methods That Actually Work
A practitioner's rundown of data poisoning attack detection methods: spectral signatures, activation clustering, and what OWASP and NIST recommend.
-
Adversarial Examples vs. Data Poisoning
Adversarial examples attack a deployed model at inference; data poisoning attacks the model before it is deployed. Different timing, different defenses.
-
Data Poisoning and Backdoor Attacks on Foundation Models
Training data manipulation, backdoor triggers, and Trojan attacks against foundation models: what the threat model requires and which defenses hold up.