Detection of Trojaning Attack on Neural Networks via Cost of Sample Classification

<div>The distribution of node sensitivity in trojaned neural networks. (a) Face recognition model. (A) The fc8 layer. (B) The fc7 layer. (C) The fc6 layer. (b) Age recognition model. (A) The fc8 layer. (B) The fc7 layer. (C) The fc6 layer.</div>

Security and Communication Networks

fig4

Figure 4

Figure 4: Detection of Trojaning Attack on Neural Networks via Cost of Sample Classification 