SSGD: A Safe and Efficient Method of Gradient Descent

Figure 3

Training sample image of MNIST. (a) The original image. (b) From left to right are the poisoned images with ε = 5, 2, and 1, respectively.

(a)

(b)