{"id":"https://openalex.org/W7204469810","doi":"https://doi.org/10.1145/3767308.3835471","title":"DEFUSE: Generalizable Backdoor Defense for Self-Supervised Encoders with Generative Priors","display_name":"DEFUSE: Generalizable Backdoor Defense for Self-Supervised Encoders with Generative Priors","publication_year":2026,"publication_date":"2026-11-06","ids":{"openalex":"https://openalex.org/W7204469810","doi":"https://doi.org/10.1145/3767308.3835471"},"language":"en","primary_location":{"id":"doi:10.1145/3767308.3835471","doi":"https://doi.org/10.1145/3767308.3835471","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3767308.3835471","pdf_url":null,"source":{"id":"https://openalex.org/S4363608757","display_name":"ACM International Conference on Multimedia (ACM MM)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th ACM International Conference on Multimedia","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3767308.3835471","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5148413557","display_name":"Tuo Chen","orcid":"https://orcid.org/0009-0004-4837-2003","observed_orcids":["https://orcid.org/0009-0004-4837-2003"]},"institutions":[{"id":"https://openalex.org/I4405270328","display_name":"Ant Group (China)","ror":"https://ror.org/00g5w7n47","country_code":"CN","type":"company","lineage":["https://openalex.org/I4405270328"]},{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tuo Chen","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, China and Ant Group, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0004-4837-2003","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China and Ant Group, Hangzhou, China","institution_ids":["https://openalex.org/I4405270328","https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125737002","display_name":"Jie Gui","orcid":"https://orcid.org/0000-0002-9450-1759","observed_orcids":["https://orcid.org/0000-0002-9450-1759"]},"institutions":[{"id":"https://openalex.org/I4210155350","display_name":"Purple Mountain Laboratories","ror":"https://ror.org/04zcbk583","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210155350"]},{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jie Gui","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, China and Purple Mountain Laboratories, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-9450-1759","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China and Purple Mountain Laboratories, Nanjing, China","institution_ids":["https://openalex.org/I4210155350","https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084617283","display_name":"Minjing Dong","orcid":"https://orcid.org/0009-0003-1717-818X","observed_orcids":["https://orcid.org/0009-0003-1717-818X"]},"institutions":[{"id":"https://openalex.org/I168719708","display_name":"City University of Hong Kong","ror":"https://ror.org/03q8dnn23","country_code":"HK","type":"education","lineage":["https://openalex.org/I168719708"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Minjing Dong","raw_affiliation_strings":["Department of Computer Science, City University of Hong Kong, Hongkong, China"],"raw_orcid":"https://orcid.org/0009-0003-1717-818X","affiliations":[{"raw_affiliation_string":"Department of Computer Science, City University of Hong Kong, Hongkong, China","institution_ids":["https://openalex.org/I168719708"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013213053","display_name":"Lanting Fang","orcid":"https://orcid.org/0000-0002-1374-395X","observed_orcids":["https://orcid.org/0000-0002-1374-395X"]},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lanting Fang","raw_affiliation_strings":["Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-1374-395X","affiliations":[{"raw_affiliation_string":"Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5148469824","display_name":"Ju Jia","orcid":"https://orcid.org/0000-0001-6894-1331","observed_orcids":["https://orcid.org/0000-0001-6894-1331"]},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ju Jia","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0001-6894-1331","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030151061","display_name":"Benlei Cui","orcid":"https://orcid.org/0000-0002-2186-2676","observed_orcids":["https://orcid.org/0000-0002-2186-2676"]},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Benlei Cui","raw_affiliation_strings":["Alibaba Group, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-2186-2676","affiliations":[{"raw_affiliation_string":"Alibaba Group, Hangzhou, China","institution_ids":["https://openalex.org/I45928872"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5139668877","display_name":"Jian Liu","orcid":"https://orcid.org/0000-0002-5323-5343","observed_orcids":["https://orcid.org/0000-0002-5323-5343"]},"institutions":[{"id":"https://openalex.org/I4405270328","display_name":"Ant Group (China)","ror":"https://ror.org/00g5w7n47","country_code":"CN","type":"company","lineage":["https://openalex.org/I4405270328"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jian Liu","raw_affiliation_strings":["Ant Group, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-5323-5343","affiliations":[{"raw_affiliation_string":"Ant Group, Hangzhou, China","institution_ids":["https://openalex.org/I4405270328"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"718","last_page":"727"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.0006000000284984708,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor-detection","display_name":"backdoor detection","score":0.8709999918937683},{"id":"https://openalex.org/keywords/backdoor-attacks","display_name":"backdoor attacks","score":0.7250000238418579},{"id":"https://openalex.org/keywords/conditional-diffusion-models","display_name":"conditional diffusion models","score":0.6990000009536743},{"id":"https://openalex.org/keywords/generative-priors","display_name":"generative priors","score":0.8930000066757202},{"id":"https://openalex.org/keywords/semantic-reconstruction","display_name":"semantic reconstruction","score":0.6340000033378601},{"id":"https://openalex.org/keywords/bayesian-posterior-inference","display_name":"Bayesian posterior inference","score":0.6850000023841858}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9185000061988831},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6972000002861023},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.5584999918937683},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5432000160217285},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.5199000239372253},{"id":"https://openalex.org/C177769412","wikidata":"https://www.wikidata.org/wiki/Q278090","display_name":"Prior probability","level":3,"score":0.5175999999046326},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.47769999504089355},{"id":"https://openalex.org/C165464430","wikidata":"https://www.wikidata.org/wiki/Q1570441","display_name":"Parameterized complexity","level":2,"score":0.4498000144958496},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4318000078201294},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.4228000044822693},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.4108999967575073},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.39640000462532043},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.38929998874664307},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.36500000953674316},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.35100001096725464},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.3474000096321106},{"id":"https://openalex.org/C60048249","wikidata":"https://www.wikidata.org/wiki/Q37437","display_name":"Syntax","level":2,"score":0.32989999651908875},{"id":"https://openalex.org/C160234255","wikidata":"https://www.wikidata.org/wiki/Q812535","display_name":"Bayesian inference","level":3,"score":0.31130000948905945},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.3068000078201294},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.2768000066280365},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.272599995136261},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.2721000015735626},{"id":"https://openalex.org/C90805587","wikidata":"https://www.wikidata.org/wiki/Q10944557","display_name":"Word (group theory)","level":2,"score":0.271699994802475},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.27090001106262207}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3767308.3835471","doi":"https://doi.org/10.1145/3767308.3835471","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3767308.3835471","pdf_url":null,"source":{"id":"https://openalex.org/S4363608757","display_name":"ACM International Conference on Multimedia (ACM MM)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th ACM International Conference on Multimedia","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2608.25851","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.25851","pdf_url":"https://arxiv.org/pdf/2608.25851","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2608.25851","doi":"https://doi.org/10.48550/arxiv.2608.25851","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2608.25851","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.1145/3767308.3835471","doi":"https://doi.org/10.1145/3767308.3835471","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3767308.3835471","pdf_url":null,"source":{"id":"https://openalex.org/S4363608757","display_name":"ACM International Conference on Multimedia (ACM MM)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th ACM International Conference on Multimedia","raw_type":"proceedings-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204469810.pdf","grobid_xml":"https://content.openalex.org/works/W7204469810.grobid-xml"},"referenced_works_count":33,"referenced_works":["https://openalex.org/W2640329709","https://openalex.org/W2774423163","https://openalex.org/W2886641317","https://openalex.org/W2966187620","https://openalex.org/W3138646989","https://openalex.org/W3189812816","https://openalex.org/W4226002507","https://openalex.org/W4297808394","https://openalex.org/W4312700692","https://openalex.org/W4312933868","https://openalex.org/W4366208220","https://openalex.org/W4385848774","https://openalex.org/W4386065388","https://openalex.org/W4386066154","https://openalex.org/W4386185600","https://openalex.org/W4389768332","https://openalex.org/W4390872161","https://openalex.org/W4390873054","https://openalex.org/W4390874189","https://openalex.org/W4390874616","https://openalex.org/W4394929583","https://openalex.org/W4402727926","https://openalex.org/W4402754214","https://openalex.org/W4402776103","https://openalex.org/W4413146500","https://openalex.org/W4413157129","https://openalex.org/W4415014307","https://openalex.org/W4416780398","https://openalex.org/W6948626004","https://openalex.org/W7090942304","https://openalex.org/W7127403976","https://openalex.org/W7133208264","https://openalex.org/W7133252867"],"related_works":["https://openalex.org/W4413157129","https://openalex.org/W7108680487","https://openalex.org/W4394929583","https://openalex.org/W4391508118","https://openalex.org/W4386066154","https://openalex.org/W7166725126","https://openalex.org/W3189812816","https://openalex.org/W4413146540","https://openalex.org/W7135237142","https://openalex.org/W4400188454"],"abstract_inverted_index":{"Self-supervised":[0],"learning":[1],"(SSL)":[2],"encoders":[3,15],"are":[4,21,46,101],"vulnerable":[5],"to":[6,11,38,48,93,104,107,152,183,209],"backdoor":[7,61,74],"attacks,":[8],"posing":[9],"threats":[10],"both":[12,210],"visual":[13,211],"SSL":[14,65,212],"and":[16,30,121,155,213],"vision-language":[17,214],"encoders.":[18,66,215],"Existing":[19],"defenses":[20],"typically":[22],"designed":[23],"for":[24,64,144],"only":[25],"one":[26],"of":[27],"these":[28,54],"paradigms":[29],"rely":[31],"on":[32,223],"restrictive":[33],"assumptions":[34],"such":[35],"as":[36,76],"access":[37],"uninfected":[39],"in-distribution":[40],"data":[41,185],"or":[42,112,230],"precomputed":[43],"pseudo-labels,":[44],"which":[45],"difficult":[47],"satisfy":[49],"in":[50,158],"practice.":[51],"To":[52],"address":[53],"limitations,":[55],"we":[56,72,127,173],"propose":[57],"DEFUSE,":[58],"a":[59,77,85,159,165,175],"generalizable":[60],"detection":[62,75],"framework":[63],"Inspired":[67],"by":[68,84,164],"Bayesian":[69],"posterior":[70],"inference,":[71],"reformulate":[73],"representation-conditioned":[78],"image":[79,189],"likelihood":[80,132],"estimation":[81],"problem":[82],"parameterized":[83],"conditional":[86],"diffusion":[87,177],"generative":[88,181],"model.":[89],"Uninfected":[90],"representations":[91,138],"tend":[92],"yield":[94],"semantically":[95,113],"consistent":[96],"reconstructions,":[97],"whereas":[98],"backdoored":[99],"ones":[100],"more":[102],"likely":[103],"be":[105],"mapped":[106],"the":[108,118,124,130,140,150,187,221,227,231],"attacker's":[109],"target":[110],"class":[111],"meaningless":[114],"images,":[115],"deviating":[116],"from":[117,171],"original":[119],"semantics":[120],"thereby":[122],"exposing":[123],"backdoor.":[125],"However,":[126],"find":[128],"that":[129,198],"exact":[131],"is":[133,237],"intractable,":[134],"because":[135],"highly":[136],"abstracted":[137],"discard":[139],"low-level":[141],"information":[142],"necessary":[143],"pixel-faithful":[145],"reconstruction.":[146],"We":[147],"therefore":[148],"relax":[149],"objective":[151],"semantic":[153,193],"reconstruction":[154],"evaluate":[156],"it":[157],"well-separated":[160],"representation":[161],"space":[162],"provided":[163],"reference":[166],"encoder.":[167],"Rather":[168],"than":[169],"training":[170],"scratch,":[172],"fine-tune":[174],"pretrained":[176],"model,":[178],"leveraging":[179],"its":[180],"prior":[182,224],"map":[184],"onto":[186],"natural":[188],"manifold":[190],"while":[191],"preserving":[192],"content.":[194],"Extensive":[195],"experiments":[196],"demonstrate":[197],"DEFUSE":[199],"substantially":[200],"outperforms":[201],"existing":[202],"detectors":[203],"across":[204],"diverse":[205],"attack":[206,232],"settings,":[207],"generalizing":[208],"Notably,":[216],"our":[217],"method":[218],"greatly":[219],"reduces":[220],"reliance":[222],"knowledge":[225],"about":[226],"victim":[228],"encoder":[229],"strategy.":[233],"The":[234],"source":[235],"code":[236],"available":[238],"at":[239],"https://github.com/jsrdcht/DEFUSE.":[240]},"counts_by_year":[],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2026-08-28T00:00:00"}