Skip to content

Latest commit

 

History

History
11 lines (9 loc) · 698 Bytes

README.md

File metadata and controls

11 lines (9 loc) · 698 Bytes
Raw

Beatrix

This is the source code for our NDSS'23 paper "The Beatrix Resurrections: Robust Backdoor Detection via Gram Matrices" [arXiv].

Dynamic Backdoor Attacks

  • Input-Aware Dynamic Backdoor Attack (NeurIPS'20) [code]
  • Invisible Backdoor Attack with Sample-Specific Triggers (ICCV'21) [code]
  • Dynamic Backdoor Attacks Against Machine Learning Models (Euro S&P'22)

In this demo implementation, we only include input-aware dynamic backdoor.

Backdoor Detection Methods

Beatrix and other baseline methods are included in ./defenses