Natural Backdoor Attacks on Deep Neural Networks via Raindrops

Figure 4

Backdoor instances generated by RDBA on ImageNet with different densities . (a) α = 0.5. (b) α = 3. (c) α = 6.

(a)

(b)

(c)