Boosting Backdoor Attack with a Learnable Poisoning Sample Selection Strategy

Abstract

This paper studies which training samples should be poisoned rather than treating all candidates equally. A learnable mask and min-max optimization identify high-impact samples efficiently, strengthening backdoor attacks under constrained poisoning budgets.

Citation