reds-lab / Narcissus

The official implementation of the CCS'23 paper, Narcissus clean-label backdoor attack -- only takes THREE images to poison a face recognition dataset in a clean-label way and achieves a 99.89% attack success rate.
107Updated last year

Alternatives and similar repositories for Narcissus:

Users that are interested in Narcissus are comparing it to the libraries listed below