Natural Backdoor Attacks on Deep Neural Networks via Raindrops

Figure 7

The sustainability of backdoor behaviors of BadNets, Blending, and our methods to the fine-pruning defense.