CLIPGuard is proposed, a lightweight and fully black-box defense specifically designed to mitigate embedding-space backdoors in CLIP encoders, consistently outperforming existing black-box defenses, including CleanCLIP and CleanerCLIP.
A. Abdel-Naby, Mohamed Elmahallawy· Pacific-Asia Conference on K...· 1 citation
Federated Learning enables decentralized model training by exchanging model updates--rather than raw data--with a central parameter server (PS). While most of the existing defenses primarily assume static or independently acting adversaries, we reveal a new class of dynamically adaptive attacks that systematically bypa...
M. Shaaban, A. Abdel-Naby, Mohamed Elmahallawy· 0 citations
Deep neural networks (DNNs) are increasingly deployed in real-world vision systems, yet their predictions can be covertly manipulated by backdoor attacks, in which malicious triggers cause targeted misclassification while preserving high clean accuracy. Existing defenses often rely on model internals, training data, or...
A. Abdel-Naby, Mohamed Elmahallawy· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.