Conceptual

Steganography-Based Sample-Specific Backdoor Attacks on On-Device Deep Learning Models

A backdoor attack against the real deep-learning models embedded in mobile apps that hides its trigger with DNN-based image steganography, producing imperceptible, per-sample triggers instead of a fixed visible patch. By extracting on-device models from real apps and injecting these stealthy triggers, it achieves higher attack success than prior patch-based methods while preserving clean-input accuracy.