What Response Marginals Miss: Adaptive Query Complexity of Functional Backdoor Recovery

Functional backdoor recovery finds any trigger whose attack success rate is at least a given threshold rather than to recover the planted trigger. We study the minimum number of queries required for this task under label feedback which returns the predicted class label. We construct two finite...