Natural Backdoor Attacks on Deep Neural Networks via Raindrops

<div>The heat maps of poisoned samples generated by different attacks. (a) GTSRB and (b) ImageNet.</div>

Security and Communication Networks

Figure 8: Natural Backdoor Attacks on Deep Neural Networks via Raindrops 