Toward Backdoor Attacks for Image Captioning Model in Deep Neural Networks

Figure 2

The type of trigger for the backdoor sample. (a) Type (1). (b) Type (2). (c) Type (3).

(a)

(b)

(c)