atlas

Research map / Adversarial robustness and security / Backdoor and poisoning

Backdoor Attack with Imperceptible Input and Latent Modification

NeurIPS 2021 · Adversarial robustness and security › Backdoor and poisoning · approach: Trigger-based backdoor attacks · 36 citations (OpenAlex)

Read the paperCheck your idea against 108,967 papers

AI-extracted summary. Written by AI from the paper's title only (no summary yet). Numbers and claims can be wrong or missing context, so check the paper before you cite or build on it.

Measured effects reported in the paper

What was changedWhereMeasuredEffect
add sliced-Wasserstein latent regularization R_phi to the backdoor objective (ablation)WB / LIRA-style backdoor · MNIST and CIFAR10 activation clusteringlatent cluster separabilityHelped
add latent Wasserstein regularization (WB vs LIRA)LIRA · CIFAR10 all-to-oneattack success rate: 1.00 -> 0.99Hurt
add latent Wasserstein regularization (WB vs LIRA)LIRA · MNIST all-to-allattack success rate: 0.99 -> 0.96Hurt
use WB instead of Adversarial Embedding against activation clusteringDenseNet CIFAR10 · adjusted Rand Index all-to-oneadjusted Rand Index: 0.1820 -> 0.0382Helped
use WB instead of Adversarial Embedding against activation clusteringVGG GTSRB · adjusted Rand Index all-to-oneadjusted Rand Index: 0.6420 -> 0.1010Helped
use discriminant-direction sliced Wasserstein (DSWD) instead of random-direction SWD (ablation)latent distance estimate · MNIST/CIFAR10 latent spaceestimate variance and computeHelped

Closest papers by meaning

Writing a paper in this area? scime draft is a free LaTeX editor with AI included, real-time co-authors and a check of your references and venue rules before you submit. It also imports OpenAI Prism projects.

Open scime draft

Get the next scime Dispatch and a monthly field update

Free. We send a confirmation link first; every email has a one-click unsubscribe. Privacy