Closed ArshadIram closed 1 year ago
clean label is a baseline that is expected to not work.
I guess you are referring to label consistent attack, which is work from Madry’s group.
Yes, Label consistent attack. Could not understand Madry's group?
Even refool attack success rate is very lower:
That is recently changed in https://github.com/ain-soph/trojanzoo/commit/c2fd73e3e9380514f09020a93b8e216703a6a3ee for the mark alpha value.
We believe it's expected to not work. If you find any solution to make it perform well, we may have a discussion on that.
Here's my notes on Refool: https://ain-soph.github.io/trojanzoo/trojanvision/attacks/backdoor/clean_label.html#trojanvision.attacks.Refool
I am trying to reproduce the clean label backdoor attack and getting this accuracy