Fetching the paper…
Reading the bibliography…
Backdoor attacks, which maliciously control a well-trained model's outputs of the instances with specific triggers, are recently shown to be serious threats to the safety of reusing deep neural networks (DNNs).
Roberta: A robustly optimized bert pretraining approach
Yinhan Liu, Myle Ott, Naman Goyal, Jingfei Du, Mandar Joshi, Danqi Chen, Omer Levy, Mike Lewis, Luke Zettlemoyer, and Veselin Stoyanov. 2019 · 1907
Earlier work this paper cites.
Design and evaluation of a multi-domain trojan detection method on deep neural networks
Yansong Gao, Yeonjae Kim, Bao Gia Doan, Zhi Zhang, Gongxuan Zhang, Surya Nepal, Damith C Ranasinghe, and Hyoungshick Kim. 2019a · 1911
Earlier work this paper cites.
Rethinking the trigger of backdoor attack
Yiming Li, Tongqing Zhai, Baoyuan Wu, Yong Jiang, Zhifeng Li, and Shutao Xia. 2020 · 2004
Earlier work this paper cites.
Universal adversarial attacks with natural triggers for text classification
Liwei Song, Xinwei Yu, Hsuan-Tung Peng, and Karthik Narasimhan. 2020 · 2005
Earlier work this paper cites.
Badnl: Backdoor attacks against nlp models
Xiaoyi Chen, Ahmed Salem, Michael Backes, Shiqing Ma, and Yang Zhang. 2020 · 2006
Earlier work this paper cites.
Natural backdoor attack on text data
Lichao Sun. 2020 · 2006
Earlier work this paper cites.
Biographies, Bollywood, boom-boxes and blenders: Domain adaptation for sentiment classification
John Blitzer, Mark Dredze, and Fernando Pereira. 2007 · 2007
Earlier work this paper cites.
Chuanshuai Chen and Jiazhu Dai. 2020 · 2007
Earlier work this paper cites.
Trojaning language models for fun and profit
Xinyang Zhang, Zheng Zhang, and Ting Wang. 2020 · 2008
Earlier work this paper cites.
Learning word vectors for sentiment analysis
Andrew L. Maas, Raymond E. Daly, Peter T. Pham, Dan Huang, Andrew Y. Ng, and Christopher Potts. 2011 · 2011
Earlier work this paper cites.
Onion: A simple and effective defense against textual backdoor attacks
Fanchao Qi, Yangyi Chen, Mukai Li, Zhiyuan Liu, and Maosong Sun. 2020 · 2011
Earlier work this paper cites.
Imagenet classification with deep convolutional neural networks
Alex Krizhevsky, Ilya Sutskever, and Geoffrey E. Hinton. 2012 · 2012
Earlier work this paper cites.
Adam: A method for stochastic optimization
Diederik P. Kingma and Jimmy Ba. 2015 · 2015
Earlier work this paper cites.
Character-level convolutional networks for text classification
Xiang Zhang, Junbo Jake Zhao, and Yann LeCun. 2015 · 2015
Cited alongside, same era.
Deep residual learning for image recognition
Kaiming He, Xiangyu Zhang, Shaoqing Ren, and Jian Sun. 2016 · 2016
Cited alongside, same era.
Targeted backdoor attacks on deep learning systems using data poisoning
Xinyun Chen, Chang Liu, Bo Li, Kimberly Lu, and Dawn Song. 2017 · 2017
Cited alongside, same era.
Badnets: Identifying vulnerabilities in the machine learning model supply chain
Tianyu Gu, Brendan Dolan-Gavitt, and Siddharth Garg. 2017 · 2017
Cited alongside, same era.
Pointer sentinel mixture models
Stephen Merity, Caiming Xiong, James Bradbury, and Richard Socher. 2017 · 2017
Cited alongside, same era.
Poison attacks against text datasets with conditional adversarially regularized autoencoder
Alvin Chan, Yi Tay, Yew-Soon Ong, and Aston Zhang. 2020 · 2020
Later among the works it cites.
Sentinet: Detecting localized universal attacks against deep learning systems
Edward Chou, Florian Tramèr, and Giancarlo Pellegrino. 2020 · 2020
Later among the works it cites.
Februus: Input purification defense against trojan attacks on deep neural network systems
Bao Gia Doan, Ehsan Abbasnejad, and Damith C Ranasinghe. 2020 · 2020
Later among the works it cites.
Weight poisoning attacks on pretrained models
Keita Kurita, Paul Michel, and Graham Neubig. 2020 · 2020
Later among the works it cites.
Reflection backdoor: A natural backdoor attack on deep neural networks
Yunfei Liu, Xingjun Ma, James Bailey, and Feng Lu. 2020 · 2020
Later among the works it cites.
Input-aware dynamic backdoor attack
alphaXiv searches the wider corpus for related work and actual follow-ups.
alphaXiv is searching for related work…
Seyed-Mohsen Moosavi-Dezfooli, Alhussein Fawzi, Omar Fawzi, and Pascal Frossard. 2017 · 2017
Cited alongside, same era.
Large scale crowdsourcing and characterization of twitter abusive behavior
Antigoni Founta, Constantinos Djouvas, Despoina Chatzakou, Ilias Leontiadis, Jeremy Blackburn, Gianluca Stringhini, Athena Vakali, Michael Sirivianos, and Nicolas Kourtellis. 2018 · 2018
Cited alongside, same era.
Deepinspect: A black-box trojan detection and mitigation framework for deep neural networks
Huili Chen, Cheng Fu, Jishen Zhao, and Farinaz Koushanfar. 2019 · 2019
Cited alongside, same era.
A backdoor attack against lstm-based text classification systems
Jiazhu Dai, Chuanshuai Chen, and Yufeng Li. 2019 · 2019
Cited alongside, same era.
BERT: Pre-training of deep bidirectional transformers for language understanding
Jacob Devlin, Ming-Wei Chang, Kenton Lee, and Kristina Toutanova. 2019 · 2019
Cited alongside, same era.
Language models are unsupervised multitask learners
Alec Radford, Jeffrey Wu, Rewon Child, David Luan, Dario Amodei, and Ilya Sutskever. 2019 · 2019
Cited alongside, same era.
Universal adversarial triggers for attacking and analyzing NLP
Eric Wallace, Shi Feng, Nikhil Kandpal, Matt Gardner, and Sameer Singh. 2019 · 2019
Cited alongside, same era.
Tuan Anh Nguyen and Anh Tran. 2020 · 2020
Later among the works it cites.
Hidden trigger backdoor attacks
Aniruddha Saha, Akshayvarun Subramanya, and Hamed Pirsiavash. 2020 · 2020
Later among the works it cites.
Clean-label backdoor attacks on video recognition models
Shihao Zhao, Xingjun Ma, Xiang Zheng, James Bailey, Jingjing Chen, and Yu-Gang Jiang. 2020 · 2020
Later among the works it cites.
T-miner: A generative approach to defend against trojan attacks on dnn-based text classification
Ahmadreza Azizi, Ibrahim Asadullah Tahmid, Asim Waheed, Neal Mangaokar, Jiameng Pu, Mobin Javed, Chandan K Reddy, and Bimal Viswanath. 2021 · 2021
Closest in time.
Neural attention distillation: Erasing backdoor triggers from deep neural networks
Yige Li, Nodens Koren, Lingjuan Lyu, Xixiang Lyu, Bo Li, and Xingjun Ma. 2021 · 2021
Closest in time.
Red alarm for pre-trained models: Universal vulnerabilities by neuron-level backdoor attacks
Zhengyan Zhang, Guangxuan Xiao, Yongwei Li, Tian Lv, Fanchao Qi, Yasheng Wang, Xin Jiang, Zhiyuan Liu, and Maosong Sun. 2021 · 2021
Closest in time.
Can adversarial weight perturbations inject neural backdoors
Siddhant Garg, Adarsh Kumar, Vibhor Goel, and Yingyu Liang. 2020 · 2032
Closest in time.
Be careful about poisoned word embeddings: Exploring the vulnerability of the embedding layers in NLP models
Wenkai Yang, Lei Li, Zhiyuan Zhang, Xuancheng Ren, Xu Sun, and Bin He. 2021a · 2058
Closest in time.