Trojaning Attack on Neural Networks
Date: 2018-02
Affected: Face recognition, speech recognition NNs
Attack vector: backdoor
Category: research
Severity: High

Liu et al. (Purdue) inject trojans into pre-trained networks via trigger generation, training-data synthesis, and partial retraining. Demonstrated on face and speech recognition: any face with the trigger is recognized as a target person. NDSS 2018.


Mitigations:

Architectural layers (MAESTRO):