Trigger Value Selection in Clean-Label Malware Backdoors: An Effectiveness-Detectability Analysis

Clean-label backdoor poisoning is a threat to machine learning-based malware classifiers because poisoned samples can be inserted into training data without changing their labels. Previous explanation-guided attacks mainly focus on selecting important trigger features, but the values assigned to...