{"id":"https://openalex.org/W4392908931","doi":"https://doi.org/10.1109/icassp48485.2024.10447895","title":"Defending against Clean-Image Backdoor Attack in Multi-Label Classification","display_name":"Defending against Clean-Image Backdoor Attack in Multi-Label Classification","publication_year":2024,"publication_date":"2024-03-18","ids":{"openalex":"https://openalex.org/W4392908931","doi":"https://doi.org/10.1109/icassp48485.2024.10447895"},"language":"en","primary_location":{"id":"doi:10.1109/icassp48485.2024.10447895","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/icassp48485.2024.10447895","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2024 - 2024 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079336541","display_name":"Cheng\u2010Yi Lee","orcid":null},"institutions":[{"id":"https://openalex.org/I10091056","display_name":"Kanazawa University","ror":"https://ror.org/02hwp6a56","country_code":"JP","type":"education","lineage":["https://openalex.org/I10091056"]},{"id":"https://openalex.org/I4210098366","display_name":"Institute of Information Science, Academia Sinica","ror":"https://ror.org/00z83z196","country_code":"TW","type":"facility","lineage":["https://openalex.org/I4210098366","https://openalex.org/I84653119"]}],"countries":["JP","TW"],"is_corresponding":true,"raw_author_name":"Cheng-Yi Lee","raw_affiliation_strings":["IIS, Academia Sinica,Taiwan ROC","IIS, Academia Sinica, Taiwan ROC","Kanazawa University, Japan"],"affiliations":[{"raw_affiliation_string":"IIS, Academia Sinica,Taiwan ROC","institution_ids":["https://openalex.org/I4210098366"]},{"raw_affiliation_string":"IIS, Academia Sinica, Taiwan ROC","institution_ids":["https://openalex.org/I4210098366"]},{"raw_affiliation_string":"Kanazawa University, Japan","institution_ids":["https://openalex.org/I10091056"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102631557","display_name":"Cheng-Chang Tsai","orcid":"https://orcid.org/0009-0007-1003-0181"},"institutions":[{"id":"https://openalex.org/I4210098366","display_name":"Institute of Information Science, Academia Sinica","ror":"https://ror.org/00z83z196","country_code":"TW","type":"facility","lineage":["https://openalex.org/I4210098366","https://openalex.org/I84653119"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Cheng-Chang Tsai","raw_affiliation_strings":["IIS, Academia Sinica,Taiwan ROC","IIS, Academia Sinica, Taiwan ROC"],"affiliations":[{"raw_affiliation_string":"IIS, Academia Sinica,Taiwan ROC","institution_ids":["https://openalex.org/I4210098366"]},{"raw_affiliation_string":"IIS, Academia Sinica, Taiwan ROC","institution_ids":["https://openalex.org/I4210098366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047429221","display_name":"Ching-Chia Kao","orcid":null},"institutions":[{"id":"https://openalex.org/I4210098366","display_name":"Institute of Information Science, Academia Sinica","ror":"https://ror.org/00z83z196","country_code":"TW","type":"facility","lineage":["https://openalex.org/I4210098366","https://openalex.org/I84653119"]},{"id":"https://openalex.org/I16733864","display_name":"National Taiwan University","ror":"https://ror.org/05bqach95","country_code":"TW","type":"education","lineage":["https://openalex.org/I16733864"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Ching-Chia Kao","raw_affiliation_strings":["IIS, Academia Sinica,Taiwan ROC","National Taiwan University, Taiwan ROC","IIS, Academia Sinica, Taiwan ROC"],"affiliations":[{"raw_affiliation_string":"IIS, Academia Sinica,Taiwan ROC","institution_ids":["https://openalex.org/I4210098366"]},{"raw_affiliation_string":"National Taiwan University, Taiwan ROC","institution_ids":["https://openalex.org/I16733864"]},{"raw_affiliation_string":"IIS, Academia Sinica, Taiwan ROC","institution_ids":["https://openalex.org/I4210098366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042784674","display_name":"Chun-Shien Lu","orcid":"https://orcid.org/0000-0002-5900-0019"},"institutions":[{"id":"https://openalex.org/I4210098366","display_name":"Institute of Information Science, Academia Sinica","ror":"https://ror.org/00z83z196","country_code":"TW","type":"facility","lineage":["https://openalex.org/I4210098366","https://openalex.org/I84653119"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Chun-Shien Lu","raw_affiliation_strings":["IIS, Academia Sinica,Taiwan ROC","IIS, Academia Sinica, Taiwan ROC"],"affiliations":[{"raw_affiliation_string":"IIS, Academia Sinica,Taiwan ROC","institution_ids":["https://openalex.org/I4210098366"]},{"raw_affiliation_string":"IIS, Academia Sinica, Taiwan ROC","institution_ids":["https://openalex.org/I4210098366"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085568918","display_name":"Chia-Mu Yu","orcid":"https://orcid.org/0000-0002-1677-2131"},"institutions":[{"id":"https://openalex.org/I148366613","display_name":"National Yang Ming Chiao Tung University","ror":"https://ror.org/00se2k293","country_code":"TW","type":"education","lineage":["https://openalex.org/I148366613"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Chia-Mu Yu","raw_affiliation_strings":["National Yang Ming Chiao Tung University,Taiwan ROC","National Yang Ming Chiao Tung University, Taiwan ROC"],"affiliations":[{"raw_affiliation_string":"National Yang Ming Chiao Tung University,Taiwan ROC","institution_ids":["https://openalex.org/I148366613"]},{"raw_affiliation_string":"National Yang Ming Chiao Tung University, Taiwan ROC","institution_ids":["https://openalex.org/I148366613"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5079336541"],"corresponding_institution_ids":["https://openalex.org/I10091056","https://openalex.org/I4210098366"],"apc_list":null,"apc_paid":null,"fwci":0.3637,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.61742082,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"5500","last_page":"5504"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9871000051498413,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9871000051498413,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9606000185012817,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9650989770889282},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6097325086593628},{"id":"https://openalex.org/keywords/contextual-image-classification","display_name":"Contextual image classification","score":0.5451695919036865},{"id":"https://openalex.org/keywords/multi-label-classification","display_name":"Multi-label classification","score":0.521538257598877},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.4721042215824127},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.41478657722473145},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3983888626098633},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3514654040336609}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9650989770889282},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6097325086593628},{"id":"https://openalex.org/C75294576","wikidata":"https://www.wikidata.org/wiki/Q5165192","display_name":"Contextual image classification","level":3,"score":0.5451695919036865},{"id":"https://openalex.org/C2776482837","wikidata":"https://www.wikidata.org/wiki/Q3553958","display_name":"Multi-label classification","level":2,"score":0.521538257598877},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.4721042215824127},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.41478657722473145},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3983888626098633},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3514654040336609}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icassp48485.2024.10447895","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/icassp48485.2024.10447895","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2024 - 2024 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321040","display_name":"National Science Council","ror":"https://ror.org/02kv4zf79"},{"id":"https://openalex.org/F4320331164","display_name":"National Science and Technology Council","ror":"https://ror.org/00wnb9798"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W1861492603","https://openalex.org/W2031489346","https://openalex.org/W2807363941","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W2957702778","https://openalex.org/W3042368254","https://openalex.org/W3093239278","https://openalex.org/W3212023986","https://openalex.org/W3214636874","https://openalex.org/W3216083537","https://openalex.org/W4214673031","https://openalex.org/W4214680449","https://openalex.org/W4285601739","https://openalex.org/W4312280786","https://openalex.org/W4312569687","https://openalex.org/W4320736757","https://openalex.org/W4372348438","https://openalex.org/W4385187298","https://openalex.org/W4386065356","https://openalex.org/W4386076050","https://openalex.org/W6784558051","https://openalex.org/W6788876066","https://openalex.org/W6803053407","https://openalex.org/W6803329306","https://openalex.org/W6809665764","https://openalex.org/W6809890637"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W4205999209","https://openalex.org/W2735080633","https://openalex.org/W2291489469","https://openalex.org/W2546503577","https://openalex.org/W4387801808"],"abstract_inverted_index":{"Deep":[0],"neural":[1],"networks":[2],"(DNNs)":[3],"are":[4],"known":[5],"to":[6,9,16,60,79,106],"be":[7],"vulnerable":[8],"backdoor":[10,40,82,95,109],"attacks.":[11,83],"Specifically,":[12],"the":[13,20,32,39,85,91,108,143],"attacker":[14,57],"endeavors":[15],"implant":[17],"backdoors":[18],"in":[19,52,87],"DNN":[21],"model":[22,34,93,117],"by":[23],"injecting":[24],"a":[25,50,74,112,126],"set":[26],"of":[27,111,145],"poisoning":[28],"samples":[29],"such":[30],"that":[31],"malicious":[33],"predicts":[35],"target":[36],"labels":[37,63],"once":[38],"is":[41,58],"triggered.":[42],"The":[43,115],"clean-image":[44,81,149],"attack":[45],"has":[46],"recently":[47],"emerged":[48],"as":[49],"threat":[51],"multi-label":[53,152],"classification,":[54],"where":[55],"an":[56],"able":[59],"poison":[61],"training":[62],"without":[64],"tampering":[65],"with":[66],"image":[67],"contents.":[68],"In":[69],"this":[70],"paper,":[71],"we":[72],"propose":[73],"simple":[75],"but":[76],"effective":[77],"method":[78,98],"alleviate":[80],"Considering":[84],"difference":[86],"weight":[88,102],"convergence":[89],"between":[90],"benign":[92],"and":[94,104],"model,":[96],"our":[97,130,146],"relies":[99],"on":[100],"partial":[101],"initialization":[103],"fine-tuning":[105],"mitigate":[107],"behaviors":[110],"suspicious":[113],"model.":[114],"fine-tuned":[116],"sustains":[118],"its":[119],"clean":[120,136],"accuracy":[121],"through":[122],"knowledge":[123],"distillation":[124],"over":[125],"few":[127],"iterations.":[128],"Importantly,":[129],"approach":[131],"does":[132],"not":[133],"require":[134],"extra":[135],"images":[137],"for":[138,151],"purification.":[139],"Extensive":[140],"experiments":[141],"demonstrate":[142],"effectiveness":[144],"defenses":[147],"against":[148],"attacks":[150],"classifications":[153],"across":[154],"two":[155],"benchmark":[156],"datasets.":[157]},"counts_by_year":[{"year":2024,"cited_by_count":1}],"updated_date":"2025-12-25T23:11:45.687758","created_date":"2025-10-10T00:00:00"}