David J. Miller

Strong evasive backdoor attacks and an ensemble defense

Various defenses have been proposed to counter backdoors in deep neural network classifiers, but due to the diverse mechanisms through which backdoor triggers can be incorporated into data samples, no single defense is universally effective. We introduce an ensemble defense that consolidates the complementary strengt...