Search papers, labs, and topics across Lattice.
University of Toronto
1
0
1
An adversary can permanently cripple deep ReLU networks without ever altering model parameters or labels, weaponizing the "dying neuron" pathology through subtle batch reordering and gradient-inversion poisoning.
