Anti-Distillation Backdoor Attacks: Backdoors Can Really Survive in Knowledge Distillation

1 code implementation • MM - Proceedings of the ACM International Conference on Multimedia 2021 • Yunjie Ge, Qian Wang, Baolin Zheng, Xinlu Zhuang, Qi Li, Chao Shen, Cong Wang

In this paper, we, for the first time, propose a novel Anti-Distillation Backdoor Attack (ADBA), in which the backdoor embedded in the public teacher model can survive the knowledge distillation process and thus be transferred to secret distilled student models.

Backdoor Attack Knowledge Distillation