From a technical perspective, we raise an interesting new question. Usually, one mitigates data poisoning attacks by *removing* training points. But camouflage essentially asks: can you negate data poisoning attacks by *adding* points! Interesting beyond MU. 7/n

→ View original post on X — @thegautamkamath