Natural Backdoor Attacks on Deep Neural Networks via Raindrops

Figure 5

The sustainability of backdoor behaviors of BadNets, Blending, and our methods to the fine-tuning defense.