Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: How to Inject Backdoors with Better Consistency: Logit Anchoring on
  Clean Data   Since training a large-scale backdoored model from scratch requires a large
training dataset, several recent attacks have considered to inject backdoors
into a trained clean model without altering model behaviors on the clean data.
Previous work finds that backdoors can be injected into a trained clean model
with Adversarial Weight Perturbation (AWP). Here AWPs refers to the variations
of parameters that are small in backdoor learning. In this work, we observe an
interesting phenomenon that the variations of parameters are always AWPs when
tuning the trained clean model to inject backdoors. We further provide
theoretical analysis to explain this phenomenon. We formulate the behavior of
maintaining accuracy on clean data as the consistency of backdoored models,
which includes both global consistency and instance-wise consistency. We
extensively analyze the effects of AWPs on the consistency of backdoored
models. In order to achieve better consistency, we propose a novel anchoring
loss to anchor or freeze the model behaviors on the clean data, with a
theoretical guarantee. Both the analytical and the empirical results validate
the effectiveness of the anchoring loss in improving the consistency,
especially the instance-wise consistency.

25
The categories of this paper are: patt-sol
8
The categories of this paper are: hep-ex
13
The categories of this paper are: quant-ph
28
The categories of this paper are: alg-geom
22
The categories of this paper are: chao-dyn
11
The categories of this paper are: hep-lat
36
The categories of this paper are: cmp-lg
3
The categories of this paper are: physics
20
The categories of this paper are: acc-phys
9
The categories of this paper are: nlin
10
The categories of this paper are: q-bio
4
The categories of this paper are: cond-mat
24
The categories of this paper are: dg-ga
2
The categories of this paper are: math
12
The categories of this paper are: nucl-th
18
The categories of this paper are: econ