Alon Rosen

Statistically Undetectable Backdoors in Deep Neural Networks

It is shown how an adversarial model trainer can plant backdoors in a large class of deep, feedforward neural networks, demonstrating a fundamental power asymmetry between model trainers and model users.