{"id":"https://openalex.org/W4408354448","doi":"https://doi.org/10.1109/icassp49660.2025.10888729","title":"Distill To Detect: Amplifying Anomalies in Backdoor Models through Knowledge Distillation","display_name":"Distill To Detect: Amplifying Anomalies in Backdoor Models through Knowledge Distillation","publication_year":2025,"publication_date":"2025-03-12","ids":{"openalex":"https://openalex.org/W4408354448","doi":"https://doi.org/10.1109/icassp49660.2025.10888729"},"language":"en","primary_location":{"id":"doi:10.1109/icassp49660.2025.10888729","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp49660.2025.10888729","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2025 - 2025 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5109165921","display_name":"Chang Hu","orcid":null},"institutions":[{"id":"https://openalex.org/I50760025","display_name":"Hangzhou Dianzi University","ror":"https://ror.org/0576gt767","country_code":"CN","type":"education","lineage":["https://openalex.org/I50760025"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chang Hu","raw_affiliation_strings":["Hangzhou Dianzi University,School of Communication Engineering,Hangzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hangzhou Dianzi University,School of Communication Engineering,Hangzhou,China","institution_ids":["https://openalex.org/I50760025"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103009026","display_name":"Xuyang Teng","orcid":"https://orcid.org/0000-0003-0219-0664"},"institutions":[{"id":"https://openalex.org/I50760025","display_name":"Hangzhou Dianzi University","ror":"https://ror.org/0576gt767","country_code":"CN","type":"education","lineage":["https://openalex.org/I50760025"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xuyang Teng","raw_affiliation_strings":["Hangzhou Dianzi University,School of Communication Engineering,Hangzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hangzhou Dianzi University,School of Communication Engineering,Hangzhou,China","institution_ids":["https://openalex.org/I50760025"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062268486","display_name":"Wenpeng Xing","orcid":"https://orcid.org/0000-0001-5848-9417"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenpeng Xing","raw_affiliation_strings":["Binjiang Institute of Zhejiang University Zhejiang University,Hangzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Binjiang Institute of Zhejiang University Zhejiang University,Hangzhou,China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115589692","display_name":"Han Chen","orcid":"https://orcid.org/0009-0002-6420-3731"},"institutions":[{"id":"https://openalex.org/I50760025","display_name":"Hangzhou Dianzi University","ror":"https://ror.org/0576gt767","country_code":"CN","type":"education","lineage":["https://openalex.org/I50760025"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Han Chen","raw_affiliation_strings":["Hangzhou Dianzi University,School of Communication Engineering,Hangzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hangzhou Dianzi University,School of Communication Engineering,Hangzhou,China","institution_ids":["https://openalex.org/I50760025"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108953941","display_name":"Chenhao Ye","orcid":"https://orcid.org/0009-0002-9754-7135"},"institutions":[{"id":"https://openalex.org/I50760025","display_name":"Hangzhou Dianzi University","ror":"https://ror.org/0576gt767","country_code":"CN","type":"education","lineage":["https://openalex.org/I50760025"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenhao Ye","raw_affiliation_strings":["Hangzhou Dianzi University,School of Communication Engineering,Hangzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hangzhou Dianzi University,School of Communication Engineering,Hangzhou,China","institution_ids":["https://openalex.org/I50760025"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100785901","display_name":"Meng Han","orcid":"https://orcid.org/0000-0001-7472-0842"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Meng Han","raw_affiliation_strings":["GenTel.io Zhejiang University,Hangzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"GenTel.io Zhejiang University,Hangzhou,China","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.7669000029563904,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.7669000029563904,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9674538373947144},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5585445165634155},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.36070123314857483},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.18364548683166504}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9674538373947144},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5585445165634155},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.36070123314857483},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.18364548683166504}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icassp49660.2025.10888729","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp49660.2025.10888729","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2025 - 2025 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W2194775991","https://openalex.org/W2325939864","https://openalex.org/W2753783305","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W2962951509","https://openalex.org/W2963163009","https://openalex.org/W2966689772","https://openalex.org/W2986013765","https://openalex.org/W2990270730","https://openalex.org/W3034258347","https://openalex.org/W3152758407","https://openalex.org/W4214680449","https://openalex.org/W4324007135","https://openalex.org/W4385767783","https://openalex.org/W4393158745","https://openalex.org/W6637373629","https://openalex.org/W6638523607","https://openalex.org/W6730179637","https://openalex.org/W6746897123","https://openalex.org/W6756074407","https://openalex.org/W6756333562","https://openalex.org/W6766253520","https://openalex.org/W6766336336","https://openalex.org/W6787972765","https://openalex.org/W6789325072","https://openalex.org/W6789730115","https://openalex.org/W6847153587"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4386080799"],"abstract_inverted_index":{"Backdoor":[0],"attacks":[1,30,91,145,159],"represent":[2],"a":[3,23,32,85],"significant":[4],"threat":[5],"to":[6,14,44,73,112],"the":[7,15,140,166],"security":[8],"of":[9,17,55,142,168],"deep":[10],"learning":[11],"models.":[12],"Due":[13],"stealthiness":[16],"backdoor":[18,36,42,48,57,67,90,102,118,144,158],"attacks,":[19],"effectively":[20],"detecting":[21,64,89],"whether":[22],"model":[24,163],"has":[25],"been":[26],"compromised":[27],"by":[28],"such":[29],"remains":[31],"major":[33],"challenge.":[34],"Previous":[35],"detection":[37,141],"methods":[38],"either":[39],"rely":[40],"on":[41,52,101,121],"datasets":[43],"identify":[45],"anomalies":[46,119],"in":[47,61,63],"samples":[49,68,103,123],"or":[50,104],"depend":[51,100],"prior":[53,106],"knowledge":[54,110],"existing":[56],"attacks.":[58],"This":[59,82,126],"results":[60],"difficulties":[62],"backdoors":[65],"when":[66,77],"are":[69],"unavailable":[70],"and":[71,116,149,160],"leads":[72],"poor":[74],"generalization":[75,137],"capabilities":[76],"addressing":[78],"new":[79],"attack":[80],"methods.":[81],"work":[83],"proposes":[84],"novel":[86],"approach":[87,127,155],"for":[88,124],"called":[92],"Distill":[93],"To":[94],"Detect":[95],"(D2D),":[96],"that":[97],"does":[98],"not":[99,129],"any":[105],"knowledge.":[107],"It":[108],"utilizes":[109],"distillation":[111],"amplify":[113],"more":[114,131],"general":[115],"universal":[117],"exhibited":[120],"clean":[122],"detection.":[125],"is":[128],"only":[130],"efficient":[132],"but":[133],"also":[134],"exhibits":[135],"strong":[136],"capabilities,":[138],"enabling":[139],"most":[143],"with":[146],"low":[147],"time":[148],"computational":[150],"costs.":[151],"We":[152],"tested":[153],"our":[154,169],"against":[156],"six":[157],"three":[161],"different":[162],"architectures,":[164],"demonstrating":[165],"effectiveness":[167],"proposed":[170],"method.":[171]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}