Once an attacker successfully poisons the training data, they can further use these vulnerabilities to launch more adversarial attacks or trigger backdoor actions. These misclassifications expose […]