Why Backdooring Neural Networks is so Easy?
It is shown that the same feature-learning dynamics that make neural networks powerful can also make them more vulnerable to backdoors, and that security audits based on linear heuristics can systematically underestimate backdoor vulnerability in the widely adopted feature-learning regimes.
Issam Seddik, Mohamed El Amine Seddik
· 0 citations