Clean Data Can Still Carry Backdoors: Support-Persistent Backdoors for Model Reuse

Traditional backdoor attacks inject artificial trigger patterns into training data, causing models to misclassify triggered inputs while maintaining normal behavior on clean samples. Since these artificial triggers are absent in clean datasets, standard knowledge distillation KD typically...