VarDefense: Variance-Based Defense against Poison Attack

Figure 3

The performance of VarDefense over various trigger settings in four datasets. The f and r in this figure denote the fixed and random position while 3, 5, and 7 denote the trigger with , , and 7 resolution, respectively. The global means that the trigger is global imperceptible noise.