Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Semantic Host-free Trojan Attack   In this paper, we propose a novel host-free Trojan attack with triggers that
are fixed in the semantic space but not necessarily in the pixel space. In
contrast to existing Trojan attacks which use clean input images as hosts to
carry small, meaningless trigger patterns, our attack considers triggers as
full-sized images belonging to a semantically meaningful object class. Since in
our attack, the backdoored classifier is encouraged to memorize the abstract
semantics of the trigger images than any specific fixed pattern, it can be
later triggered by semantically similar but different looking images. This
makes our attack more practical to be applied in the real-world and harder to
defend against. Extensive experimental results demonstrate that with only a
small number of Trojan patterns for training, our attack can generalize well to
new patterns of the same Trojan class and can bypass state-of-the-art defense
methods.

6
The categories of this paper are: astro-ph
22
The categories of this paper are: chao-dyn
16
The categories of this paper are: stat
4
The categories of this paper are: cond-mat
0
The categories of this paper are: hep-ph
5
The categories of this paper are: gr-qc
8
The categories of this paper are: hep-ex
18
The categories of this paper are: econ
15
The categories of this paper are: nucl-ex
9
The categories of this paper are: nlin
29
The categories of this paper are: funct-an
23
The categories of this paper are: solv-int
30
The categories of this paper are: q-alg
37
The categories of this paper are: supr-con
19
The categories of this paper are: eess
14
The categories of this paper are: math-ph