Stateful detection of adversarial reprogramming

Yang Zheng, Xiaoyi Feng, Zhaoqiang Xia, Xiaoyue Jiang, Maura Pintor, Ambra Demontis, Battista Biggio, Fabio Roli

Abstract: Highlights•This work is the first that proposes a defense against reprogramming in black-box scenarios.•Our analysis shows that stateful defenses increase the attackers' cost for executing adversarial reprogramming.•Stateful defenses remain a valuable deterrence mechanism even when the attacker exploits transferability to overcome it.