Toward Backdoor Attacks for Image Captioning Model in Deep Neural Networks

Algorithm 1

Proposed scheme process.

	Description: validation data , backdoor sample , target class , original training dataset , original class .
	Backdoor sample:
(1)	Constructing dataset (, )
(2)	Training the processing for the target model
(3)	Testing the accuracy of the target model
(4)	return