Fetching the paper…
Reading the bibliography…
We conduct a systematic study of backdoor vulnerabilities in normally trained Deep Learning models.
Least squares quantization in pcm
Stuart Lloyd · 1982
Earlier work this paper cites.
The fast Fourier transform and its applications
E Oran Brigham · 1988
Earlier work this paper cites.
Jflow: Practical mostly-static information flow control
Andrew C Myers · 1999
Earlier work this paper cites.
Stackguard: Simple stack smash protection for gcc
Perry Wagle, Crispin Cowan, et al · 2003
Earlier work this paper cites.
A type system for robust declassification
Steve Zdancewic · 2003
Earlier work this paper cites.
On the effectiveness of address-space randomization
Hovav Shacham, Matthew Page, Ben Pfaff, Eu-Jin Goh, Nagendra Modadugu, and Dan Boneh · 2004
Earlier work this paper cites.
Dynamic security labels and noninterference
Lantian Zheng and Andrew C Myers · 2004
Earlier work this paper cites.
Seeing stars: Exploiting class relationships for sentiment categorization with respect to rating scales
Bo Pang and Lillian Lee · 2005
Earlier work this paper cites.
Speech and language processing
Dan Jurafsky · 2006
Earlier work this paper cites.
Learning multiple layers of features from tiny images
Alex Krizhevsky, Geoffrey Hinton, et al · 2009
Earlier work this paper cites.
Learning word vectors for sentiment analysis
Andrew Maas, Raymond E Daly, Peter T Pham, Dan Huang, Andrew Y Ng, and Christopher Potts · 2011
Earlier work this paper cites.
Aslr-guard: Stopping address space leakage for code reuse attacks
Kangjie Lu, Chengyu Song, Byoungyoung Lee, Simon P Chung, Taesoo Kim, and Wenke Lee · 2015
Earlier work this paper cites.
Imagenet large scale visual recognition challenge
Olga Russakovsky, Jia Deng, Hao Su, Jonathan Krause, Sanjeev Satheesh, Sean Ma, Zhiheng Huang, Andrej Karpathy, Aditya Khosla, Michael Bernstein, et al · 2015
Earlier work this paper cites.
Character-level convolutional networks for text classification
Xiang Zhang, Junbo Zhao, and Yann LeCun · 2015
Earlier work this paper cites.
Towards evaluating the robustness of neural networks
Nicholas Carlini and David Wagner · 2017
Earlier work this paper cites.
Targeted backdoor attacks on deep learning systems using data poisoning
Xinyun Chen, Chang Liu, Bo Li, Kimberly Lu, and Dawn Song · 2017
Earlier work this paper cites.
Universal adversarial perturbations
Seyed-Mohsen Moosavi-Dezfooli, Alhussein Fawzi, Omar Fawzi, and Pascal Frossard · 2017
Earlier work this paper cites.
Fine-pruning: Defending against backdooring attacks on deep neural networks
Kang Liu, Brendan Dolan-Gavitt, and Siddharth Garg · 2018
Earlier work this paper cites.
Trojaning attack on neural networks
Yingqi Liu, Shiqing Ma, Yousra Aafer, Wen-Chuan Lee, Juan Zhai, Weihang Wang, and Xiangyu Zhang · 2018
Earlier work this paper cites.
Towards deep learning models resistant to adversarial attacks
Aleksander Madry, Aleksandar Makelov, Ludwig Schmidt, Dimitris Tsipras, and Adrian Vladu · 2018
Earlier work this paper cites.
Spectral signatures in backdoor attacks
Brandon Tran, Jerry Li, and Aleksander Madry · 2018
Earlier work this paper cites.
Clean-label backdoor attacks
Alexander Turner, Dimitris Tsipras, and Aleksander Madry · 2018
Earlier work this paper cites.
The unreasonable effectiveness of deep features as a perceptual metric
Richard Zhang, Phillip Isola, Alexei A Efros, Eli Shechtman, and Oliver Wang · 2018
Earlier work this paper cites.
In nomine function: Naming functions in stripped binaries with neural networks
Fiorella Artuso, Giuseppe Antonio Di Luna, Luca Massarelli, and Leonardo Querzoni · 2019
Earlier work this paper cites.
A new backdoor attack in cnns by training set corruption without label poisoning
Mauro Barni, Kassem Kallas, and Benedetta Tondi · 2019
Earlier work this paper cites.
A backdoor attack against lstm-based text classification systems
Jiazhu Dai, Chuanshuai Chen, and Yufeng Li · 2019
Earlier work this paper cites.
Strip: A defence against trojan attacks on deep neural networks
Yansong Gao, Change Xu, Derui Wang, Shiping Chen, Damith C Ranasinghe, and Surya Nepal · 2019
Earlier work this paper cites.
Badnets: Evaluating backdooring attacks on deep neural networks
Tianyu Gu, Kang Liu, Brendan Dolan-Gavitt, and Siddharth Garg · 2019
Earlier work this paper cites.
Abs: Scanning neural networks for back-doors by artificial brain stimulation
Yingqi Liu, Wen-Chuan Lee, Guanhong Tao, Shiqing Ma, Yousra Aafer, and Xiangyu Zhang · 2019
Cited alongside, same era.
Safe: Self-attentive function embeddings for binary similarity
Luca Massarelli, Giuseppe Antonio Di Luna, Fabio Petroni, Roberto Baldoni, and Leonardo Querzoni · 2019
Cited alongside, same era.
Language models are unsupervised multitask learners
Alec Radford, Jeffrey Wu, Rewon Child, David Luan, Dario Amodei, Ilya Sutskever, et al · 2019
Cited alongside, same era.
Universal adversarial triggers for attacking and analyzing nlp
Eric Wallace, Shi Feng, Nikhil Kandpal, Matt Gardner, and Sameer Singh · 2019
Cited alongside, same era.
Neural cleanse: Identifying and mitigating backdoor attacks in neural networks
Bolun Wang, Yuanshun Yao, Shawn Shan, Huiying Li, Bimal Viswanath, Haitao Zheng, and Ben Y Zhao · 2019
Cited alongside, same era.
Dba: Distributed backdoor attacks against federated learning
Backdoor attacks on pre-trained models by layerwise weight poisoning
Linyang Li, Demin Song, Xiaonan Li, Jiehang Zeng, Ruotian Ma, and Xipeng Qiu · 2021
Later among the works it cites.
Hidden backdoors in human-centric language models
Shaofeng Li, Hui Liu, Tian Dong, Benjamin Zi Hao Zhao, Minhui Xue, Haojin Zhu, and Jialiang Lu · 2021
Later among the works it cites.
Neural attention distillation: Erasing backdoor triggers from deep neural networks
Yige Li, Nodens Koren, Lingjuan Lyu, Xixiang Lyu, Bo Li, and Xingjun Ma · 2021
Later among the works it cites.
Invisible backdoor attack with sample-specific triggers
Yuezun Li, Yiming Li, Baoyuan Wu, Longkang Li, Ran He, and Siwei Lyu · 2021
Later among the works it cites.
Wanet–imperceptible warping-based backdoor attack
Anh Nguyen and Anh Tran · 2021
Later among the works it cites.
Mind the style of text! adversarial and backdoor attacks based on text style transfer
alphaXiv searches the wider corpus for related work and actual follow-ups.
alphaXiv is searching for related work…
Chulin Xie, Keli Huang, Pin-Yu Chen, and Bo Li · 2019
Cited alongside, same era.
How to backdoor federated learning
Eugene Bagdasaryan, Andreas Veit, Yiqing Hua, Deborah Estrin, and Vitaly Shmatikov · 2020
Cited alongside, same era.
Sentinet: Detecting localized universal attack against deep learning systems
Edward Chou, Florian Tramer, and Giancarlo Pellegrino · 2020
Cited alongside, same era.
Confusables
Unicode Consortium · 2020
Cited alongside, same era.
Local model poisoning attacks to byzantine-robust federated learning
Minghong Fang, Xiaoyu Cao, Jinyuan Jia, and Neil Gong · 2020
Cited alongside, same era.
Backdoor attacks and countermeasures on deep learning: A comprehensive review
Yansong Gao, Bao Gia Doan, Zhi Zhang, Siqi Ma, Jiliang Zhang, Anmin Fu, Surya Nepal, and Hyoungshick Kim · 2020
Cited alongside, same era.
Towards inspecting and eliminating trojan backdoors in deep neural networks
Wenbo Guo, Lun Wang, Yan Xu, Xinyu Xing, Min Du, and Dawn Song · 2020
Cited alongside, same era.
Fanchao Qi, Yangyi Chen, Xurui Zhang, Mukai Li, Zhiyuan Liu, and Maosong Sun · 2021
Later among the works it cites.
Hidden killer: Invisible textual backdoor attacks with syntactic trigger
Fanchao Qi, Mukai Li, Yangyi Chen, Zhengyan Zhang, Zhiyuan Liu, Yasheng Wang, and Maosong Sun · 2021
Later among the works it cites.
Turn the combination lock: Learnable textual backdoor attacks via word substitution
Fanchao Qi, Yuan Yao, Sophia Xu, Zhiyuan Liu, and Maosong Sun · 2021
Later among the works it cites.
Backdoor scanning for deep neural networks through k-arm optimization
Guangyu Shen, Yingqi Liu, Guanhong Tao, Shengwei An, Qiuling Xu, Siyuan Cheng, Shiqing Ma, and Xiangyu Zhang · 2021
Later among the works it cites.
Demon in the variant: Statistical analysis of dnns for robust backdoor contamination detection
Di Tang, XiaoFeng Wang, Haixu Tang, and Kehuan Zhang · 2021
Later among the works it cites.
Adversarial neuron pruning purifies backdoored deep models
Dongxian Wu and Yisen Wang · 2021
Later among the works it cites.
Patchcleanser: Certifiably robust defense against adversarial patches for any image classifier
Chong Xiang, Saeed Mahloujifar, and Prateek Mittal · 2021
Later among the works it cites.
Rethinking stealthiness of backdoor attack against nlp models
Wenkai Yang, Yankai Lin, Peng Li, Jie Zhou, and Xu Sun · 2021
Later among the works it cites.
Trojaning language models for fun and profit
Xinyang Zhang, Zheng Zhang, Shouling Ji, and Ting Wang · 2021
Later among the works it cites.
On the effectiveness of adversarial training against backdoor attacks
Yinghua Gao, Dongxian Wu, Jingfeng Zhang, Guanhao Gan, Shu-Tao Xia, Gang Niu, and Masashi Sugiyama · 2022
Closest in time.
Dataset security for machine learning: Data poisoning, backdoor attacks, and defenses
Micah Goldblum, Dimitris Tsipras, Chulin Xie, Xinyun Chen, Avi Schwarzschild, Dawn Song, Aleksander Madry, Bo Li, and Tom Goldstein · 2022
Closest in time.
An overview of backdoor attacks against deep neural networks and possible defences
Wei Guo, Benedetta Tondi, and Mauro Barni · 2022
Closest in time.
Deep learning backdoors
Shaofeng Li, Shiqing Ma, Minhui Xue, and Benjamin Zi Hao Zhao · 2022
Closest in time.
Backdoor learning: A survey
Yiming Li, Yong Jiang, Zhifeng Li, and Shu-Tao Xia · 2022
Closest in time.
Piccolo: Exposing complex backdoors in nlp transformer models
Yingqi Liu, Guangyu Shen, Guanhong Tao, Shengwei An, Shiqing Ma, and Xiangyu Zhang · 2022
Closest in time.
Complex backdoor detection by symmetric feature differencing
Yingqi Liu, Guangyu Shen, Guanhong Tao, Zhenting Wang, Shiqing Ma, and Xiangyu Zhang · 2022
Closest in time.
Hidden trigger backdoor attack on NLP models via linguistic style manipulation
Xudong Pan, Mi Zhang, Beina Sheng, Jiaming Zhu, and Min Yang · 2022
Closest in time.
Dynamic backdoor attacks against machine learning models
Ahmed Salem, Rui Wen, Michael Backes, Shiqing Ma, and Yang Zhang · 2022
Closest in time.
Constrained optimization with dynamic bound-scaling for effective nlp backdoor defense
Guangyu Shen, Yingqi Liu, Guanhong Tao, Qiuling Xu, Zhuo Zhang, Shengwei An, Shiqing Ma, and Xiangyu Zhang · 2022
Closest in time.
Deck: Model hardening for defending pervasive backdoors
Guanhong Tao, Yingqi Liu, Siyuan Cheng, Shengwei An, Zhuo Zhang, Qiuling Xu, Guangyu Shen, and Xiangyu Zhang · 2022
Closest in time.
Model orthogonalization: Class distance hardening in neural networks for better security
Guanhong Tao, Yingqi Liu, Guangyu Shen, Qiuling Xu, Shengwei An, Zhuo Zhang, and Xiangyu Zhang · 2022
Closest in time.
Better trigger inversion optimization in backdoor scanning
Guanhong Tao, Guangyu Shen, Yingqi Liu, Shengwei An, Qiuling Xu, Shiqing Ma, Pan Li, and Xiangyu Zhang · 2022
Closest in time.