BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain

Abstract

This paper demonstrates that outsourced training of machine learning models introduces new security risks, as an adversary can create a maliciously trained network (BadNet) that performs well on most inputs but behaves badly on specific attacker-chosen inputs.