Radboud University; CISPA Helmholtz Center for Information Security; University of Virginia
Rui Wen, Zhengyu Zhao, Zhuoran Liu, Michael Backes, Tianhao Wang, Yang Zhang
Data poisoning;adversarial training;indiscriminative features;adaptive defenses;robust vs. non-robust features
Is Adversarial Training Really a Silver Bullet for Mitigating Data Poisoning?