New Sparse Backdoor attack hides undetectable compromises in image classifiers

Researchers have developed a novel supply-chain attack called Sparse Backdoor, capable of embedding a provably undetectable backdoor into pre-trained image classifiers like convolutional networks and Vision Transformers. The method involves injecting a sparse perturbation into fully connected layers, which is then masked by a Gaussian dither. This dither creates a clean reference distribution, making it computationally infeasible to distinguish the backdoored model from the original, even with white-box access to the parameters. AI

Summary written by gemini-2.5-flash-lite from 1 source. How we write summaries →

IMPACT Highlights a new sophisticated attack vector for model supply chains, necessitating enhanced security measures for deployed AI systems.

RANK_REASON Academic paper detailing a new method for embedding undetectable backdoors in image classification models. [lever_c_demoted from research: ic=1 ai=1.0]

Read on arXiv cs.LG →

• Sparse Backdoor
• Vision Transformers
• arXiv

• paper
• safety