Are Targeted Data Poisoning Attacks as Effective as We Think?
This paper identifies both the easiest and hardest to poison examples based on only clean model information, enabling both rigorous worst-case evaluation and proactive vulnerability-aware defense.