Space Over Statistic, Retraining Over Ranking: Auditing Training Labels Under Label-Only Backdoors
A controlled swap keeps the test, the labels and the metric fixed, change only the feature space, and judge each defense by retraining the victim on what it keeps, not by its detection score.
Arnab Dey, Mohammad Mahfuzul Islam
· 0 citations