{"id":"https://openalex.org/W4408325195","doi":"https://doi.org/10.1109/globecom52923.2024.10901693","title":"A Mutation-Based Method for Backdoored Sample Detection Without Clean Data","display_name":"A Mutation-Based Method for Backdoored Sample Detection Without Clean Data","publication_year":2024,"publication_date":"2024-12-08","ids":{"openalex":"https://openalex.org/W4408325195","doi":"https://doi.org/10.1109/globecom52923.2024.10901693"},"language":"en","primary_location":{"id":"doi:10.1109/globecom52923.2024.10901693","is_oa":false,"landing_page_url":"https://doi.org/10.1109/globecom52923.2024.10901693","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"GLOBECOM 2024 - 2024 IEEE Global Communications Conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5047315011","display_name":"Luoyu Chen","orcid":"https://orcid.org/0009-0001-5746-9817"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Luoyu Chen","raw_affiliation_strings":["University of Technology Sydney,School of Computer Science,Sydney,Australia"],"affiliations":[{"raw_affiliation_string":"University of Technology Sydney,School of Computer Science,Sydney,Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056651698","display_name":"Feng Wu","orcid":"https://orcid.org/0000-0003-4714-7707"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Feng Wu","raw_affiliation_strings":["University of Technology Sydney,School of Computer Science,Sydney,Australia"],"affiliations":[{"raw_affiliation_string":"University of Technology Sydney,School of Computer Science,Sydney,Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100375701","display_name":"Tao Zhang","orcid":"https://orcid.org/0000-0001-5809-0801"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Tao Zhang","raw_affiliation_strings":["University of Technology Sydney,School of Computer Science,Sydney,Australia"],"affiliations":[{"raw_affiliation_string":"University of Technology Sydney,School of Computer Science,Sydney,Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087568651","display_name":"Abdullah M. Asiri","orcid":"https://orcid.org/0000-0001-7905-3209"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Ahmed Asiri","raw_affiliation_strings":["University of Technology Sydney,School of Computer Science,Sydney,Australia"],"affiliations":[{"raw_affiliation_string":"University of Technology Sydney,School of Computer Science,Sydney,Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101907050","display_name":"Weiqi Wang","orcid":"https://orcid.org/0000-0002-7905-3126"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Weiqi Wang","raw_affiliation_strings":["University of Technology Sydney,School of Computer Science,Sydney,Australia"],"affiliations":[{"raw_affiliation_string":"University of Technology Sydney,School of Computer Science,Sydney,Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101334783","display_name":"Shui Yu","orcid":null},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shui Yu","raw_affiliation_strings":["University of Technology Sydney,School of Computer Science,Sydney,Australia"],"affiliations":[{"raw_affiliation_string":"University of Technology Sydney,School of Computer Science,Sydney,Australia","institution_ids":["https://openalex.org/I114017466"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5047315011"],"corresponding_institution_ids":["https://openalex.org/I114017466"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.25956808,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"4298","last_page":"4303"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12535","display_name":"Machine Learning and Data Classification","score":0.8159999847412109,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12535","display_name":"Machine Learning and Data Classification","score":0.8159999847412109,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10412","display_name":"Microfluidic and Capillary Electrophoresis Applications","score":0.7096999883651733,"subfield":{"id":"https://openalex.org/subfields/2204","display_name":"Biomedical Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10683","display_name":"Mass Spectrometry Techniques and Applications","score":0.6894999742507935,"subfield":{"id":"https://openalex.org/subfields/1607","display_name":"Spectroscopy"},"field":{"id":"https://openalex.org/fields/16","display_name":"Chemistry"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/sample","display_name":"Sample (material)","score":0.6142516136169434},{"id":"https://openalex.org/keywords/clean-up","display_name":"Clean-up","score":0.5795442461967468},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5430587530136108},{"id":"https://openalex.org/keywords/chromatography","display_name":"Chromatography","score":0.13455453515052795},{"id":"https://openalex.org/keywords/chemistry","display_name":"Chemistry","score":0.08318999409675598}],"concepts":[{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.6142516136169434},{"id":"https://openalex.org/C2778467254","wikidata":"https://www.wikidata.org/wiki/Q5130596","display_name":"Clean-up","level":3,"score":0.5795442461967468},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5430587530136108},{"id":"https://openalex.org/C43617362","wikidata":"https://www.wikidata.org/wiki/Q170050","display_name":"Chromatography","level":1,"score":0.13455453515052795},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.08318999409675598},{"id":"https://openalex.org/C4725764","wikidata":"https://www.wikidata.org/wiki/Q844704","display_name":"Extraction (chemistry)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/globecom52923.2024.10901693","is_oa":false,"landing_page_url":"https://doi.org/10.1109/globecom52923.2024.10901693","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"GLOBECOM 2024 - 2024 IEEE Global Communications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.5299999713897705,"id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W1982506807","https://openalex.org/W2942091739","https://openalex.org/W2990270730","https://openalex.org/W2996800219","https://openalex.org/W4214680449","https://openalex.org/W4312569687","https://openalex.org/W4386076050","https://openalex.org/W6746897123","https://openalex.org/W6756074407","https://openalex.org/W6756333562","https://openalex.org/W6839126366","https://openalex.org/W6850141011"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Backdoor":[0],"attacks":[1],"significantly":[2],"threaten":[3],"machine":[4],"learning-based":[5],"vision":[6],"systems.":[7],"Existing":[8],"detection":[9],"methods":[10],"typically":[11],"require":[12],"clean":[13,48,136,186],"data":[14,68,74],"from":[15,103,132,149],"a":[16,30,139,160,167],"similar":[17],"distribution":[18,58,141],"as":[19,106,135],"the":[20,125,156],"dataset":[21],"under":[22,66],"inspection,":[23],"limiting":[24],"practical":[25],"deployment.":[26],"This":[27],"work":[28],"proposes":[29],"Mutation-Based":[31],"Method":[32],"(MBM)":[33],"for":[34,173],"detecting":[35],"and":[36,55,128,166],"filtering":[37],"backdoored":[38,54,126,133,147,150],"samples":[39,57,130,148],"in":[40,63],"image":[41],"training":[42],"dataset,":[43,158],"without":[44,182],"referencing":[45],"any":[46],"external":[47,185],"data.":[49,137,187],"MBM":[50,71,95,122,154],"aims":[51],"at":[52],"distinguishing":[53],"benign":[56,140],"via":[59],"their":[60],"distinct":[61],"stability":[62],"feature":[64],"space":[65],"certain":[67],"augmentations.":[69],"Firstly,":[70],"applies":[72],"multiple":[73],"augmentation":[75],"techniques,":[76],"generating":[77],"mutated":[78],"versions":[79],"of":[80],"each":[81,120],"sample":[82,98],"to":[83,144],"\u2018deactivate\u2019":[84],"potential":[85],"triggers":[86],"while":[87],"maintaining":[88],"natural":[89],"semantics":[90],"not":[91,131],"heavily":[92],"distorted.":[93],"Secondly,":[94],"measures":[96],"how":[97],"features":[99],"diverge":[100],"after":[101],"mutating":[102],"its":[104],"origin":[105],"poison":[107],"score,":[108],"which":[109],"we":[110],"call":[111],"\u2018Feature":[112],"Stability\u2019.":[113],"Thirdly,":[114],"by":[115],"analyzing":[116],"extreme":[117],"scores":[118],"within":[119],"class,":[121,127],"effectively":[123],"identifies":[124],"isolates":[129],"class":[134],"Finally,":[138],"is":[142],"fit":[143],"benchmark":[145],"against":[146],"class.":[151],"We":[152],"validated":[153],"on":[155,184],"CIFAR-10":[157],"achieving":[159],"true":[161],"positive":[162,169],"rate":[163,170],"above":[164],"95%":[165],"false":[168],"below":[171],"0.2%":[172],"all":[174],"defense":[175],"settings.":[176],"Our":[177],"results":[178],"confirm":[179],"MBM\u2019s":[180],"efficacy":[181],"reliance":[183]},"counts_by_year":[],"updated_date":"2025-12-28T23:10:05.387466","created_date":"2025-10-10T00:00:00"}