Why Attack Success Rate Gives a False Picture of Backdoor Removal
Executive summary / tl;dr A backdoor removal technique that looks 95% effective by the standard metric may only be 46% effective in reality, and for another technique, what looks like 30% success is actually 1%. These are not reproduction mistakes. They reflect a fundamental flaw in how backdoor removal is...
Feb 243