Fig. 6From: NBA: defensive distillation for backdoor removal via neural behavior alignmentThe ASRs of 6 defenses under different size of clean dataBack to article page