Skip to content
InfoResearchPeer-reviewed

PVDI: Preserving Vital and Disrupting Irrelevant Latent Attentions for Robust Backdoor Defense

Published
Record updated
View JSON

Summary

PVDI is a blind purification method for removing backdoors from deep neural networks. It preserves vital attention to keep core model function and disrupts irrelevant attention to neutralize backdoor behavior during fine-tuning. The source reports significant reductions in attack success rates across diverse datasets and attack scenarios, with utility preserved.

Mitigation

PVDI, a blind purification method that fine-tunes models to preserve vital attention and disrupt irrelevant attention in order to neutralize backdoors.