Detection of Trojaning Attack on Neural Networks via Cost of Sample Classification

Figure 2

Subnet structure of trojaned neural network. (a) The trojaned network can be considered as the superposition of (b) original subnet and (c) trojan subnet.