{"id":"https://openalex.org/W4285035145","doi":"https://doi.org/10.48550/arxiv.2207.03895","title":"Defense Against Multi-target Trojan Attacks","display_name":"Defense Against Multi-target Trojan Attacks","publication_year":2022,"publication_date":"2022-07-08","ids":{"openalex":"https://openalex.org/W4285035145","doi":"https://doi.org/10.48550/arxiv.2207.03895"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2207.03895","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2207.03895","pdf_url":"https://arxiv.org/pdf/2207.03895","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2207.03895","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023077368","display_name":"Haripriya Harikumar","orcid":"https://orcid.org/0000-0001-9918-381X","observed_orcids":["https://orcid.org/0000-0001-9918-381X"]},"institutions":[{"id":"https://openalex.org/I149704539","display_name":"Deakin University","ror":"https://ror.org/02czsnj07","country_code":"AU","type":"education","lineage":["https://openalex.org/I149704539"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Harikumar, Haripriya","raw_affiliation_strings":["Applied Artificial Intelligence Institute (A2I2) , Deakin University , Australia ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Applied Artificial Intelligence Institute (A2I2) , Deakin University , Australia ,","institution_ids":["https://openalex.org/I149704539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024215125","display_name":"Santu Rana","orcid":"https://orcid.org/0000-0003-2247-850X","observed_orcids":["https://orcid.org/0000-0003-2247-850X"]},"institutions":[{"id":"https://openalex.org/I149704539","display_name":"Deakin University","ror":"https://ror.org/02czsnj07","country_code":"AU","type":"education","lineage":["https://openalex.org/I149704539"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Rana, Santu","raw_affiliation_strings":["Applied Artificial Intelligence Institute (A2I2) , Deakin University , Australia ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Applied Artificial Intelligence Institute (A2I2) , Deakin University , Australia ,","institution_ids":["https://openalex.org/I149704539"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Do, Kien","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I149704539","display_name":"Deakin University","ror":"https://ror.org/02czsnj07","country_code":"AU","type":"education","lineage":["https://openalex.org/I149704539"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Do, Kien","raw_affiliation_strings":["Applied Artificial Intelligence Institute (A2I2) , Deakin University , Australia ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Applied Artificial Intelligence Institute (A2I2) , Deakin University , Australia ,","institution_ids":["https://openalex.org/I149704539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101472308","display_name":"Sunil Gupta","orcid":"https://orcid.org/0000-0002-4669-9940","observed_orcids":["https://orcid.org/0000-0002-4669-9940","https://orcid.org/0000-0002-3308-1930"]},"institutions":[{"id":"https://openalex.org/I149704539","display_name":"Deakin University","ror":"https://ror.org/02czsnj07","country_code":"AU","type":"education","lineage":["https://openalex.org/I149704539"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Gupta, Sunil","raw_affiliation_strings":["Applied Artificial Intelligence Institute (A2I2) , Deakin University , Australia ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Applied Artificial Intelligence Institute (A2I2) , Deakin University , Australia ,","institution_ids":["https://openalex.org/I149704539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076268087","display_name":"Wei Zong","orcid":"https://orcid.org/0000-0001-9714-6759","observed_orcids":["https://orcid.org/0000-0001-9714-6759"]},"institutions":[{"id":"https://openalex.org/I204824540","display_name":"University of Wollongong","ror":"https://ror.org/00jtmb277","country_code":"AU","type":"education","lineage":["https://openalex.org/I204824540"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Zong, Wei","raw_affiliation_strings":["University of Wollongong , Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Wollongong , Australia","institution_ids":["https://openalex.org/I204824540"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054741725","display_name":"Willy Susilo","orcid":"https://orcid.org/0000-0002-1562-5105","observed_orcids":["https://orcid.org/0000-0002-1562-5105"]},"institutions":[{"id":"https://openalex.org/I204824540","display_name":"University of Wollongong","ror":"https://ror.org/00jtmb277","country_code":"AU","type":"education","lineage":["https://openalex.org/I204824540"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Susilo, Willy","raw_affiliation_strings":["University of Wollongong , Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Wollongong , Australia","institution_ids":["https://openalex.org/I204824540"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5041126699","display_name":"Svetha Venkastesh","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I149704539","display_name":"Deakin University","ror":"https://ror.org/02czsnj07","country_code":"AU","type":"education","lineage":["https://openalex.org/I149704539"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Venkastesh, Svetha","raw_affiliation_strings":["Applied Artificial Intelligence Institute (A2I2) , Deakin University , Australia ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Applied Artificial Intelligence Institute (A2I2) , Deakin University , Australia ,","institution_ids":["https://openalex.org/I149704539"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor-attacks","display_name":"backdoor attacks","score":0.9760000109672546},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"adversarial learning","score":0.7160000205039978},{"id":"https://openalex.org/keywords/trojan-detection","display_name":"Trojan detection","score":0.6299999952316284},{"id":"https://openalex.org/keywords/deep-neural-network-security","display_name":"deep neural network security","score":0.6629999876022339},{"id":"https://openalex.org/keywords/image-classification","display_name":"image classification","score":0.5329999923706055}],"concepts":[{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.9438238739967346},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7964392304420471},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.6672918796539307},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6458371877670288},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6086949110031128},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.5928671360015869},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.5087373852729797},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4718247354030609},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.45223116874694824},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.4323175549507141},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.42692020535469055},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.31303471326828003},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.14049023389816284},{"id":"https://openalex.org/C140331021","wikidata":"https://www.wikidata.org/wiki/Q1868104","display_name":"Logit","level":2,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"pmh:oai:arXiv.org:2207.03895","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2207.03895","pdf_url":"https://arxiv.org/pdf/2207.03895","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:pure.atira.dk:openaire_cris_publications/858f24f7-342a-44fd-9644-ccfbbab13f32","doi":null,"is_oa":false,"landing_page_url":"https://research.manchester.ac.uk/en/publications/858f24f7-342a-44fd-9644-ccfbbab13f32","pdf_url":null,"source":{"id":"https://openalex.org/S4306400662","display_name":"Research Explorer (The University of Manchester)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I28407311","host_organization_name":"University of Manchester","host_organization_lineage":["https://openalex.org/I28407311"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Harikumar, H, Rana, S, Do, K, Gupta, S, Zong, W, Susilo, W & Venkatesh, S 2022 'Defense Against Multi-target Trojan Attacks' arXiv, pp. 1-15. https://doi.org/10.48550/arXiv.2207.03895","raw_type":"info:eu-repo/semantics/preprint"},{"id":"doi:10.48550/arxiv.2207.03895","doi":"https://doi.org/10.48550/arxiv.2207.03895","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2207.03895","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2207.03895","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2207.03895","pdf_url":"https://arxiv.org/pdf/2207.03895","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W3114838227","https://openalex.org/W3190013336","https://openalex.org/W3034334120","https://openalex.org/W3128280008","https://openalex.org/W4221166349","https://openalex.org/W3205850172","https://openalex.org/W7133188219","https://openalex.org/W4200512086","https://openalex.org/W7160137887","https://openalex.org/W4312329299"],"abstract_inverted_index":{"Adversarial":[0],"attacks":[1,18,38],"on":[2],"deep":[3],"learning-based":[4],"models":[5],"pose":[6],"a":[7,31,97,107,115,161],"significant":[8],"threat":[9,87],"to":[10,22,43,50,70,105,141],"the":[11,20,34,55,64,73,76,120,142,157,170,178],"current":[12],"AI":[13],"infrastructure.":[14],"Among":[15],"them,":[16],"Trojan":[17,41,81,127],"are":[19],"hardest":[21],"defend":[23,90],"against.":[24],"In":[25],"this":[26,86,92],"paper,":[27],"we":[28,94],"first":[29,95],"introduce":[30,96],"variation":[32],"of":[33,37,109,122,150,163,174],"Badnet":[35],"kind":[36],"that":[39,101],"introduces":[40],"backdoors":[42],"multiple":[44,103],"target":[45],"classes":[46],"and":[47,63,154],"allows":[48],"triggers":[49],"be":[51],"placed":[52],"anywhere":[53],"in":[54,75],"image.":[56],"The":[57,79,166],"former":[58],"makes":[59,66],"it":[60,67],"more":[61],"potent":[62],"latter":[65],"extremely":[68],"easy":[69],"carry":[71],"out":[72],"attack":[74,152],"physical":[77],"space.":[78],"state-of-the-art":[80],"detection":[82,116,158,172],"methods":[83],"fail":[84],"with":[85],"model.":[88],"To":[89],"against":[91],"attack,":[93],"trigger":[98,128],"reverse-engineering":[99],"mechanism":[100,117],"uses":[102],"images":[104,138],"recover":[106],"variety":[108,162],"potential":[110],"triggers.":[111,125],"We":[112,145],"then":[113,155],"propose":[114],"by":[118],"measuring":[119],"transferability":[121,133],"such":[123],"recovered":[124],"A":[126],"will":[129],"have":[130],"very":[131],"high":[132],"i.e.":[134],"they":[135],"make":[136],"other":[137],"also":[139],"go":[140],"same":[143],"class.":[144],"study":[146],"many":[147],"practical":[148],"advantages":[149],"our":[151,175],"method":[153,176],"demonstrate":[156],"performance":[159,173],"using":[160],"image":[164],"datasets.":[165],"experimental":[167],"results":[168],"show":[169],"superior":[171],"over":[177],"state-of-the-arts.":[179]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2022-07-12T00:00:00"}