Clean label attack accuracy is wrong

[ArshadIram]

I am trying to reproduce the clean label backdoor attack and getting this accuracy

[ain-soph]

clean label is a baseline that is expected to not work.

I guess you are referring to label consistent attack, which is work from Madry’s group.

[ArshadIram]

Yes, Label consistent attack. Could not understand Madry's group?

[ain-soph]

https://arxiv.org/abs/1912.02771

https://github.com/ain-soph/trojanzoo/blob/main/trojanvision/attacks/backdoor/clean_label/label_consistent.py

[ArshadIram]

Even refool attack success rate is very lower:

[ain-soph]

That is recently changed in c2fd73e for the mark alpha value.
We believe it's expected to not work. If you find any solution to make it perform well, we may have a discussion on that.

Here's my notes on Refool: https://ain-soph.github.io/trojanzoo/trojanvision/attacks/backdoor/clean_label.html#trojanvision.attacks.Refool