The official implementation of the CCS'23 paper, Narcissus clean-label backdoor attack -- only takes THREE images to poison a face recognition dataset in a clean-label way and achieves a 99.89% attack success rate.
Hello, thank you for your work. I've tried running your code to train a trigger and then displaying my trigger and your trigger (resnet18_trigger.npy). I found that there was something different between mine and yours. You can see the images below:
(The above image is my trigger, and the below is yours)
After that, I tried running experiments with my trigger and your trigger to see the performance (Training ACC, Clean test ACC, Attack Success Rate, Target class clean test ACC). In terms of Training ACC, Clean test ACC, Target class clean test ACC, they are kind of the same as when using your trigger. But the difference here lies in the Attack Success Rate, when I run with my trigger, the Attack Success Rate sort of levels off and remains no more than 0.1. I'll put the 2 images down below for you to see the effect:
(The above is when using my trigger, and the below is when using your trigger (resnet18_trigger.npy))
Note that I only change the code to load the trigger, and everywhere else remains intact.
Hello, thank you for your work. I've tried running your code to train a trigger and then displaying my trigger and your trigger (
(The above image is my trigger, and the below is yours)
After that, I tried running experiments with my trigger and your trigger to see the performance (Training ACC, Clean test ACC, Attack Success Rate, Target class clean test ACC). In terms of Training ACC, Clean test ACC, Target class clean test ACC, they are kind of the same as when using your trigger. But the difference here lies in the Attack Success Rate, when I run with my trigger, the Attack Success Rate sort of levels off and remains no more than 
(The above is when using my trigger, and the below is when using your trigger (
resnet18_trigger.npy). I found that there was something different between mine and yours. You can see the images below:0.1. I'll put the 2 images down below for you to see the effect:resnet18_trigger.npy)) Note that I only change the code to load the trigger, and everywhere else remains intact.