Research papers · Paper
Statistically Undetectable Backdoors in Deep Neural Networks
Outline · 41 pages
- Introductionp. 3
- Our Resultsp. 3
- Interpretationsp. 6
- Cryptographic Assumptions & The Johnson-Lindenstrauss Lemmap. 7
- Related Workp. 8
- Overview of Our Constructionp. 9
- Backdooring Gaussian Matricesp. 9
- Concentration in the Number of Solutionsp. 11
- Backdoors in Neural Networksp. 12
- Preliminariesp. 12
- Divergencesp. 13
- Number Balancing and Symmetric Binary Perceptronsp. 14
- Backdoors for Random Gaussian Projectionsp. 15
- Sampling the Backdoorp. 16
- Concentration in the Number of Solutionsp. 18
- Putting It All Togetherp. 22
- Tightnessp. 23
- Constructing Backdoors for Neural Networksp. 24
- Defining Backdoorsp. 24
- Neural Network Preliminariesp. 26
- Constructionp. 27
- Backdoors in Deep Neural Networksp. 30
- Basic Implementation and Experimentsp. 32
- Proof of Concept Implementationp. 32
- Computational Hardness of Collision Findingp. 33
- Concluding Remarksp. 34