Toward Backdoor Attacks for Image Captioning Model in Deep Neural Networks

Figure 5

The BLEU of the proposed method for each type of trigger. The x-axis represents the size of the trigger.