Fig. 12From: Trembling triggers: exploring the sensitivity of backdoors in DNN-based face recognitionVisualization of transformed triggers for which the empirical ASR is below 0.5 over the entire dataset. For each transformation, the closest parameter value with respect to the baseline is depicted and reported below the iconBack to article page