{"id":"https://openalex.org/W4372348438","doi":"https://doi.org/10.1109/icassp49357.2023.10097244","title":"Training Set Cleansing of Backdoor Poisoning by Self-Supervised Representation Learning","display_name":"Training Set Cleansing of Backdoor Poisoning by Self-Supervised Representation Learning","publication_year":2023,"publication_date":"2023-05-05","ids":{"openalex":"https://openalex.org/W4372348438","doi":"https://doi.org/10.1109/icassp49357.2023.10097244"},"language":"en","primary_location":{"id":"doi:10.1109/icassp49357.2023.10097244","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/icassp49357.2023.10097244","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2023 - 2023 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100459515","display_name":"Hang Wang","orcid":"https://orcid.org/0000-0003-0417-9258"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hang Wang","raw_affiliation_strings":["Meta","Pennsylvania State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Meta","institution_ids":[]},{"raw_affiliation_string":"Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110806151","display_name":"Sahar Karami","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sahar Karami","raw_affiliation_strings":["Meta"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Meta","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026844759","display_name":"Ousmane Dia","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ousmane Dia","raw_affiliation_strings":["Meta"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Meta","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110628351","display_name":"Hippolyt Ritter","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hippolyt Ritter","raw_affiliation_strings":["Meta"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Meta","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020782479","display_name":"Ehsan Emamjomeh-Zadeh","orcid":"https://orcid.org/0000-0003-1032-4503"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ehsan Emamjomeh-Zadeh","raw_affiliation_strings":["Meta"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Meta","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100390326","display_name":"Jiahui Chen","orcid":"https://orcid.org/0000-0001-7128-9778"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiahui Chen","raw_affiliation_strings":["Meta"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Meta","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085283385","display_name":"Zhen Xiang","orcid":"https://orcid.org/0000-0002-4284-2041"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhen Xiang","raw_affiliation_strings":["Pennsylvania State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101739086","display_name":"David J. Miller","orcid":"https://orcid.org/0000-0001-8848-1643"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"David J. Miller","raw_affiliation_strings":["Pennsylvania State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5063903486","display_name":"George Kesidis","orcid":"https://orcid.org/0000-0001-7947-8127"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"George Kesidis","raw_affiliation_strings":["Pennsylvania State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"33","issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9438999891281128,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9493530988693237},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6954941749572754},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5175232887268066},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.4762982428073883},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.44276145100593567},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.41413044929504395},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4133971333503723},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4055696725845337},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.06291678547859192}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9493530988693237},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6954941749572754},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5175232887268066},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4762982428073883},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.44276145100593567},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.41413044929504395},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4133971333503723},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4055696725845337},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.06291678547859192},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icassp49357.2023.10097244","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/icassp49357.2023.10097244","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2023 - 2023 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.699999988079071,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W2108598243","https://openalex.org/W2168175751","https://openalex.org/W2774423163","https://openalex.org/W2913668833","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W2966187620","https://openalex.org/W2978426779","https://openalex.org/W2980257194","https://openalex.org/W2986013765","https://openalex.org/W3012113073","https://openalex.org/W3074128044","https://openalex.org/W3113332968","https://openalex.org/W3118608800","https://openalex.org/W3132644649","https://openalex.org/W3152758407","https://openalex.org/W3157391214","https://openalex.org/W4287812705","https://openalex.org/W4289300166","https://openalex.org/W6746897123","https://openalex.org/W6756074407","https://openalex.org/W6756333562","https://openalex.org/W6762913911","https://openalex.org/W6766253520","https://openalex.org/W6774314701","https://openalex.org/W6776700526","https://openalex.org/W6787972765","https://openalex.org/W6788876066","https://openalex.org/W6789325072","https://openalex.org/W6809890637"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W2989852175","https://openalex.org/W3015716673","https://openalex.org/W4288797976","https://openalex.org/W3132644649","https://openalex.org/W3213133223","https://openalex.org/W4205710429","https://openalex.org/W2041249487"],"abstract_inverted_index":{"A":[0],"backdoor":[1,35,84,90,110,183],"or":[2,44],"Trojan":[3],"attack":[4,12],"is":[5,23,41,167],"an":[6],"important":[7],"type":[8],"of":[9,29,126,136],"data":[10,158],"poisoning":[11],"against":[13],"deep":[14],"neural":[15],"network":[16],"(DNN)":[17],"classifiers,":[18],"wherein":[19],"the":[20,34,51,75,79,83,109,113,123,134],"training":[21,103],"dataset":[22],"poisoned":[24],"with":[25],"a":[26,38,58,61,89,140,149,157],"small":[27],"number":[28],"samples":[30,69,137],"that":[31,40,101,118,175],"each":[32],"possess":[33],"pattern":[36,39,85,111],"(usually":[37],"either":[42],"imperceptible":[43],"innocuous)":[45],"and":[46,99,112,122,138,165],"which":[47,161],"are":[48],"mislabeled":[49],"to":[50,74],"attacker\u2019s":[52],"target":[53,76,115],"class.":[54],"When":[55],"trained":[56],"on":[57,65,95,144,170],"backdoor-poisoned":[59],"dataset,":[60],"DNN":[62],"behaves":[63],"normally":[64],"most":[66],"benign":[67],"test":[68,80],"but":[70],"makes":[71],"incorrect":[72],"predictions":[73],"class":[77,116,125],"when":[78],"sample":[81,163],"has":[82],"incorporated":[86],"(i.e.,":[87],"contains":[88],"trigger).":[91],"Here":[92],"we":[93],"focus":[94],"image":[96],"classification":[97],"tasks":[98],"show":[100,174],"supervised":[102],"may":[104],"build":[105],"stronger":[106],"association":[107],"between":[108,119],"associated":[114],"than":[117],"normal":[120],"features":[121],"true":[124],"origin.":[127],"By":[128],"contrast,":[129],"self-supervised":[130,154],"representation":[131,155],"learning":[132],"ignores":[133],"labels":[135],"learns":[139],"feature":[141,150],"embedding":[142,151],"based":[143],"images\u2019":[145],"semantic":[146],"content.":[147],"Using":[148],"found":[152],"by":[153],"learning,":[156],"cleansing":[159],"method,":[160],"combines":[162],"filtering":[164],"relabeling,":[166],"developed.":[168],"Experiments":[169],"CIFAR-10":[171],"benchmark":[172],"datasets":[173],"our":[176],"method":[177],"achieves":[178],"state-of-the-art":[179],"performance":[180],"in":[181],"mitigating":[182],"attacks.":[184]},"counts_by_year":[{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}