Beyond Small Patches: Black-Box Detection and Purification of Diverse Backdoor Triggers
Researchers propose TRIM (Trigger Removal by Identifying Manipulated Regions), a black-box defense that detects and removes backdoor triggers in deep neural networks at inference time without requiring model internals, t…