Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Backdoor Learning Curves: Explaining Backdoor Poisoning Beyond Influence
  Functions   Backdoor attacks inject poisoning samples during training, with the goal of
forcing a machine learning model to output an attacker-chosen class when
presented a specific trigger at test time. Although backdoor attacks have been
demonstrated in a variety of settings and against different models, the factors
affecting their effectiveness are still not well understood. In this work, we
provide a unifying framework to study the process of backdoor learning under
the lens of incremental learning and influence functions. We show that the
effectiveness of backdoor attacks depends on: (i) the complexity of the
learning algorithm, controlled by its hyperparameters; (ii) the fraction of
backdoor samples injected into the training set; and (iii) the size and
visibility of the backdoor trigger. These factors affect how fast a model
learns to correlate the presence of the backdoor trigger with the target class.
Our analysis unveils the intriguing existence of a region in the hyperparameter
space in which the accuracy on clean test samples is still high while backdoor
attacks are ineffective, thereby suggesting novel criteria to improve existing
defenses.

34
The categories of this paper are: chem-ph
12
The categories of this paper are: nucl-th
22
The categories of this paper are: chao-dyn
9
The categories of this paper are: nlin
19
The categories of this paper are: eess
31
The categories of this paper are: ao-sci
29
The categories of this paper are: funct-an
32
The categories of this paper are: atom-ph
6
The categories of this paper are: astro-ph
16
The categories of this paper are: stat
24
The categories of this paper are: dg-ga
27
The categories of this paper are: comp-gas
14
The categories of this paper are: math-ph
10
The categories of this paper are: q-bio
36
The categories of this paper are: cmp-lg
8
The categories of this paper are: hep-ex