Abstract: Backdoor attacks compromise deep neural networks by injecting them with covert, malicious behaviors during training. A backdoor can then be activated at test-time using a trigger pattern. As ...