3 ms·
Isn't the backdoor essentially equivalent to just simplifying an inference time adversarial attack?
by version_five 4y ago
Isn't the backdoor essentially equivalent to just simplifying an inference time adversarial attack?
- moyix 4y agoEven if we found a solution to inference-time adversarial attacks tomorrow, backdoor attacks would still be possible, which makes them pretty different IMO.
- cryptohell 4y agoThere are several differences: 1. Empirically, networks have many adversarial examples. It doesn't mean though that there are adversarial examples everywhere. They show that any point can be slightly changed to get whichever output. 2. Some training algorithms that already exist or will exist are meant to be robust. They show that even with a robust algorithm the backdoor will still exist. 3. As you said, they show that finding the backdoored point is also efficient to the key holder.