Watch Out! Simple Horizontal Class Backdoors Can Trivially Evade Defenses

arXiv:2310.00542v2 Announce Type: replace-cross
Abstract: All current backdoor attacks on deep learning (DL) models fall under the category of a vertical class backdoor (VCB) -- class-dependent. In VCB attacks, any sample from a class activates the implanted backdoor when the secret trigger is present. Existing defense strategies overwhelmingly focus on countering VCB attacks, especially those that are source-class-agnostic. This narrow focus neglects the potential threat of other simpler yet general backdoor types, leading to false security implications. This study introduces …

abstract arxiv attacks backdoor class cs.cr cs.lg current deep learning defense focus implanted sample secret simple strategies type