Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Backdoor Attack in the Physical World   Backdoor attack intends to inject hidden backdoor into the deep neural
networks (DNNs), such that the prediction of infected models will be
maliciously changed if the hidden backdoor is activated by the attacker-defined
trigger. Currently, most existing backdoor attacks adopted the setting of
static trigger, $i.e.,$ triggers across the training and testing images follow
the same appearance and are located in the same area. In this paper, we revisit
this attack paradigm by analyzing trigger characteristics. We demonstrate that
this attack paradigm is vulnerable when the trigger in testing images is not
consistent with the one used for training. As such, those attacks are far less
effective in the physical world, where the location and appearance of the
trigger in the digitized image may be different from that of the one used for
training. Moreover, we also discuss how to alleviate such vulnerability. We
hope that this work could inspire more explorations on backdoor properties, to
help the design of more advanced backdoor attack and defense methods.

14
The categories of this paper are: math-ph
24
The categories of this paper are: dg-ga
2
The categories of this paper are: math
17
The categories of this paper are: q-fin
4
The categories of this paper are: cond-mat
12
The categories of this paper are: nucl-th
32
The categories of this paper are: atom-ph
19
The categories of this paper are: eess
33
The categories of this paper are: plasm-ph
6
The categories of this paper are: astro-ph
31
The categories of this paper are: ao-sci
34
The categories of this paper are: chem-ph
25
The categories of this paper are: patt-sol
3
The categories of this paper are: physics
10
The categories of this paper are: q-bio
11
The categories of this paper are: hep-lat