Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Why maximum the activation of the compromised neuron #5

Open
LeeBC2298 opened this issue Nov 20, 2023 · 0 comments
Open

Why maximum the activation of the compromised neuron #5

LeeBC2298 opened this issue Nov 20, 2023 · 0 comments

Comments

@LeeBC2298
Copy link

LeeBC2298 commented Nov 20, 2023

Recently I used the pytorch version for some simple backdoor attacks, and it really works well.
However, I have a question when reading your paper and the code:
In sec 4.2 and previous sections, the paper claims that 'the compromised neurons should activate in a specific range' to get the output elevation. I think this statement makes sense and is intuitive. However, in algorithm 2 and the code, it seems that you maximum the activation value of the compromised neuron, instead of letting them activate in the specific range, in which could gets the required output elevation.
So, is maximizing the activation value of the compromised neurons equivalent to activating them within a specific range? Is it because I missed some analysis and misunderstood it?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant