WPDA: Frequency-based Backdoor Attack with Wavelet Packet Decomposition

Abstract

WPDA uses wavelet packet decomposition to identify semantically important frequency regions and inject triggers selectively into them. The resulting attack remains effective at extremely low poisoning ratios while retaining strong stealth and resistance to existing defenses.

Citation