Fetching the paper…
Reading the bibliography…
A security threat to deep neural networks (DNN) is backdoor contamination, in which an adversary poisons the training data of a target model to inject a Trojan so that images carrying a specific trigger will always be classified into a specific label.
The large-sample distribution of the likelihood ratio for testing composite hypotheses
Samuel S Wilks · 1938
Earlier work this paper cites.
Statistics for experimenters
George EP Box, William Gordon Hunter, J Stuart Hunter, et al · 1978
Earlier work this paper cites.
Parameter estimation and hypothesis testing in linear models
Karl-Rudolf Koch · 1988
Earlier work this paper cites.
Algorithms for mining distancebased outliers in large datasets
Edwin M Knox and Raymond T Ng · 1998
Earlier work this paper cites.
Quantifiable data mining using principal component analysis
Flip Korn, Alexandros Labrinidis, Yannis Kotidis, Christos Faloutsos, Alex Kaplunovich, and Dejan Perkovic · 1998
Earlier work this paper cites.
Gradient-based learning applied to document recognition
Yann LeCun, Léon Bottou, Yoshua Bengio, and Patrick Haffner · 1998
Earlier work this paper cites.
Fisher discriminant analysis with kernels
Sebastian Mika, Gunnar Ratsch, Jason Weston, Bernhard Scholkopf, and Klaus-Robert Mullers · 1999
Earlier work this paper cites.
A system for the analysis of jet engine vibration data
Alexandre Nairac, Neil Townsend, Roy Carr, Steve King, Peter Cowley, and Lionel Tarassenko · 1999
Earlier work this paper cites.
A survey of outlier detection methodologies
Victoria J. Hodge and Jim Austin · 2004
Earlier work this paper cites.
A unified framework for subspace face recognition
Xiaogang Wang and Xiaoou Tang · 2004
Earlier work this paper cites.
Learning multiple layers of features from tiny images
Alex Krizhevsky and Geoffrey Hinton · 2009
Earlier work this paper cites.
Misleading learners: Co-opting your spam filter
Blaine Nelson, Marco Barreno, Fuching Jack Chi, Anthony D Joseph, Benjamin IP Rubinstein, Udam Saini, Charles Sutton, JD Tygar, and Kai Xia · 2009
Earlier work this paper cites.
Bayesian face revisited: A joint formulation
Dong Chen, Xudong Cao, Liwei Wang, Fang Wen, and Jian Sun · 2012
Earlier work this paper cites.
Man vs. computer: Benchmarking machine learning algorithms for traffic sign recognition
Johannes Stallkamp, Marc Schlipsing, Jan Salmen, and Christian Igel · 2012
Earlier work this paper cites.
Detecting outliers: Do not use standard deviation around the mean, use absolute deviation around the median
Christophe Leys, Christophe Ley, Olivier Klein, Philippe Bernard, and Laurent Licata · 2013
Earlier work this paper cites.
A data-driven approach to cleaning large face datasets
Hong-Wei Ng and Stefan Winkler · 2014
Earlier work this paper cites.
Intriguing properties of neural networks
Christian Szegedy, Wojciech Zaremba, Ilya Sutskever, Joan Bruna, Dumitru Erhan, Ian J. Goodfellow, and Rob Fergus · 2014
Cited alongside, same era.
ImageNet Large Scale Visual Recognition Challenge
Olga Russakovsky, Jia Deng, Hao Su, Jonathan Krause, Sanjeev Satheesh, Sean Ma, Zhiheng Huang, Andrej Karpathy, Aditya Khosla, Michael Bernstein, Alexander C. Berg, and Li Fei-Fei · 2015
Cited alongside, same era.
Very deep convolutional networks for large-scale image recognition
Karen Simonyan and Andrew Zisserman · 2015
Cited alongside, same era.
Going deeper with convolutions
Christian Szegedy, Wei Liu, Yangqing Jia, Pierre Sermanet, Scott Reed, Dragomir Anguelov, Dumitru Erhan, Vincent Vanhoucke, and Andrew Rabinovich · 2015
Cited alongside, same era.
Deep residual learning for image recognition
Kaiming He, Xiangyu Zhang, Shaoqing Ren, and Jian Sun · 2016
Cited alongside, same era.
Deep learning approach for network intrusion detection in software defined networking
Sentinet: Detecting physical attacks against deep learning systems
Edward Chou, Florian Tramèr, Giancarlo Pellegrino, and Dan Boneh · 2018
Later among the works it cites.
Black-box adversarial attacks with limited queries and information
Andrew Ilyas, Logan Engstrom, Anish Athalye, and Jessy Lin · 2018
Later among the works it cites.
Printracker: Fingerprinting 3d printers using commodity scanners
Zhengxiong Li, Aditya Singh Rathore, Chen Song, Sheng Wei, Yanzhi Wang, and Wenyao Xu · 2018
Later among the works it cites.
Fine-pruning: Defending against backdooring attacks on deep neural networks
Kang Liu, Brendan Dolan-Gavitt, and Siddharth Garg · 2018
Later among the works it cites.
Trojaning attack on neural networks
Yingqi Liu, Shiqing Ma, Yousra Aafer, Wen-Chuan Lee, Juan Zhai, Weihang Wang, and Xiangyu Zhang · 2018
Later among the works it cites.
alphaXiv searches the wider corpus for related work and actual follow-ups.
alphaXiv is searching for related work…
Tuan A Tang, Lotfi Mhamdi, Des McLernon, Syed Ali Raza Zaidi, and Mounir Ghogho · 2016
Cited alongside, same era.
Mitigating poisoning attacks on machine learning models: A data provenance based approach
Nathalie Baracaldo, Bryant Chen, Heiko Ludwig, and Jaehoon Amir Safavi · 2017
Cited alongside, same era.
ZOO: zeroth order optimization based black-box attacks to deep neural networks without training substitute models
Pin-Yu Chen, Huan Zhang, Yash Sharma, Jinfeng Yi, and Cho-Jui Hsieh · 2017
Cited alongside, same era.
Targeted backdoor attacks on deep learning systems using data poisoning
Xinyun Chen, Chang Liu, Bo Li, Kimberly Lu, and Dawn Song · 2017
Cited alongside, same era.
Badnets: Identifying vulnerabilities in the machine learning model supply chain
Tianyu Gu, Brendan Dolan-Gavitt, and Siddharth Garg · 2017
Cited alongside, same era.
Understanding black-box predictions via influence functions
Pang Wei Koh and Percy Liang · 2017
Cited alongside, same era.
Level playing field for million scale face recognition
Aaron Nech and Ira Kemelmacher-Shlizerman · 2017
Cited alongside, same era.
Ali Shafahi, W Ronny Huang, Mahyar Najibi, Octavian Suciu, Christoph Studer, Tudor Dumitras, and Tom Goldstein · 2018
Later among the works it cites.
DARTS: deceiving autonomous cars with toxic signs
Chawin Sitawarin, Arjun Nitin Bhagoji, Arsalan Mosenia, Mung Chiang, and Prateek Mittal · 2018
Later among the works it cites.
Spectral signatures in backdoor attacks
Brandon Tran, Jerry Li, and Aleksander Madry · 2018
Later among the works it cites.
Detecting backdoor attacks on deep neural networks by activation clustering
Bryant Chen, Wilka Carvalho, Nathalie Baracaldo, Heiko Ludwig, Benjamin Edwards, Taesung Lee, Ian Molloy, and Biplav Srivastava · 2019
Closest in time.
STRIP: a defence against trojan attacks on deep neural networks
Yansong Gao, Change Xu, Derui Wang, Shiping Chen, Damith Chinthana Ranasinghe, and Surya Nepal · 2019
Closest in time.
ABS: scanning neural networks for back-doors by artificial brain stimulation
Yingqi Liu, Wen-Chuan Lee, Guanhong Tao, Shiqing Ma, Yousra Aafer, and Xiangyu Zhang · 2019
Closest in time.
Defending neural backdoors via generative distribution modeling
Ximing Qiao, Yukun Yang, and Hai Li · 2019
Closest in time.
Neural cleanse: Identifying and mitigating backdoor attacks in neural networks
Bolun Wang, Yuanshun Yao, Shawn Shan, Huiying Li, Bimal Viswanath, Haitao Zheng, and Ben Y. Zhao · 2019
Closest in time.
Chi-squared distribution — Wikipedia, the free encyclopedia, 2019
Wikipedia contributors · 2019
Closest in time.
Nnoculation: Broad spectrum and targeted treatment of backdoored dnns
Akshaj Kumar Veldanda, Kang Liu, Benjamin Tan, Prashanth Krishnamurthy, Farshad Khorrami, Ramesh Karri, Brendan Dolan-Gavitt, and Siddharth Garg · 2020
Closest in time.