{"id":"https://openalex.org/W4408351989","doi":"https://doi.org/10.1109/icassp49660.2025.10889177","title":"Gradient Norm-based Fine-Tuning for Backdoor Defense in Automatic Speech Recognition","display_name":"Gradient Norm-based Fine-Tuning for Backdoor Defense in Automatic Speech Recognition","publication_year":2025,"publication_date":"2025-03-12","ids":{"openalex":"https://openalex.org/W4408351989","doi":"https://doi.org/10.1109/icassp49660.2025.10889177"},"language":"en","primary_location":{"id":"doi:10.1109/icassp49660.2025.10889177","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp49660.2025.10889177","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2025 - 2025 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Nanjun Zhou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nanjun Zhou","raw_affiliation_strings":["The Hong Kong University of Science and Technology (Guangzhou),Guangzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hong Kong University of Science and Technology (Guangzhou),Guangzhou,China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5098979190","display_name":"Weilin Lin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Weilin Lin","raw_affiliation_strings":["The Hong Kong University of Science and Technology (Guangzhou),Guangzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hong Kong University of Science and Technology (Guangzhou),Guangzhou,China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100418818","display_name":"Li Liu","orcid":"https://orcid.org/0000-0002-4497-0135"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li Liu","raw_affiliation_strings":["The Hong Kong University of Science and Technology (Guangzhou),Guangzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hong Kong University of Science and Technology (Guangzhou),Guangzhou,China","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.5078,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.74578578,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10860","display_name":"Speech and Audio Processing","score":0.9740999937057495,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10860","display_name":"Speech and Audio Processing","score":0.9740999937057495,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10201","display_name":"Speech Recognition and Synthesis","score":0.9351999759674072,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.8767613768577576},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6348878145217896},{"id":"https://openalex.org/keywords/speech-recognition","display_name":"Speech recognition","score":0.5666907429695129},{"id":"https://openalex.org/keywords/norm","display_name":"Norm (philosophy)","score":0.4903102219104767},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.39447498321533203},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.18211081624031067},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.09008601307868958},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.07053866982460022}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.8767613768577576},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6348878145217896},{"id":"https://openalex.org/C28490314","wikidata":"https://www.wikidata.org/wiki/Q189436","display_name":"Speech recognition","level":1,"score":0.5666907429695129},{"id":"https://openalex.org/C191795146","wikidata":"https://www.wikidata.org/wiki/Q3878446","display_name":"Norm (philosophy)","level":2,"score":0.4903102219104767},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.39447498321533203},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.18211081624031067},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.09008601307868958},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.07053866982460022}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icassp49660.2025.10889177","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp49660.2025.10889177","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2025 - 2025 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W2059322891","https://openalex.org/W2064675550","https://openalex.org/W2104219286","https://openalex.org/W2145287260","https://openalex.org/W2194775991","https://openalex.org/W2273396394","https://openalex.org/W2807363941","https://openalex.org/W2942091739","https://openalex.org/W2953303875","https://openalex.org/W2990270730","https://openalex.org/W3015241525","https://openalex.org/W3035574168","https://openalex.org/W3100732527","https://openalex.org/W3198035615","https://openalex.org/W4229367784","https://openalex.org/W4304091911","https://openalex.org/W4312329299","https://openalex.org/W4375869076","https://openalex.org/W4398757423","https://openalex.org/W4402263555","https://openalex.org/W4403790152","https://openalex.org/W6632213196","https://openalex.org/W6746897123","https://openalex.org/W6750665317","https://openalex.org/W6784558051","https://openalex.org/W6789325072","https://openalex.org/W6803053407","https://openalex.org/W6803329306","https://openalex.org/W6809890637","https://openalex.org/W6810200297","https://openalex.org/W6810405975","https://openalex.org/W6849726631","https://openalex.org/W6853669195","https://openalex.org/W6859914037","https://openalex.org/W6868848987"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4386080799"],"abstract_inverted_index":{"Backdoor":[0],"attacks":[1,23,66,170],"have":[2],"posed":[3],"a":[4,60],"significant":[5],"threat":[6],"to":[7,44,94,118],"the":[8,25,28,32,38,42,65,68,73,76,86,101,108,113,122,128,146,154,162,172],"security":[9],"of":[10,149,156],"deep":[11],"neural":[12],"networks":[13],"(DNNs).":[14],"Despite":[15],"considerable":[16],"strides":[17],"in":[18,24,67,171],"developing":[19],"defenses":[20,30,39],"against":[21,64,168],"backdoor":[22,169],"visual":[26,43],"domain,":[27,70],"specialized":[29,164],"for":[31,131],"audio":[33,45,69,173],"domain":[34,46],"remain":[35],"empty.":[36],"Furthermore,":[37],"adapted":[40],"from":[41,75],"demonstrate":[47,145],"limited":[48],"effectiveness.":[49],"To":[50,153],"fill":[51],"this":[52,104,159],"gap,":[53],"we":[54,81,106],"propose":[55],"Gradient":[56],"Norm-based":[57],"Fine-Tuning":[58],"(GN-FT),":[59],"novel":[61],"defense":[62,167],"strategy":[63],"based":[71],"on":[72,137],"observation":[74],"corresponding":[77],"backdoored":[78,87,109,123],"models.":[79],"Specifically,":[80],"first":[82,163],"empirically":[83],"find":[84],"that":[85],"neurons":[88,99],"exhibit":[89],"greater":[90],"gradient":[91,114],"values":[92],"compared":[93],"other":[95],"neurons,":[96],"while":[97],"clean":[98],"stay":[100],"lowest.":[102],"On":[103],"basis,":[105],"fine-tune":[107],"model":[110],"by":[111],"incorporating":[112],"norm":[115],"regularization,":[116],"aiming":[117],"weaken":[119],"and":[120,165],"reduce":[121],"neurons.":[124],"We":[125],"further":[126],"approximate":[127],"loss":[129],"computation":[130],"lower":[132],"implementation":[133],"costs.":[134],"Extensive":[135],"experiments":[136],"two":[138],"speech":[139],"recognition":[140],"datasets":[141],"across":[142],"five":[143],"models":[144],"superior":[147],"performance":[148],"our":[150,157],"proposed":[151],"method.":[152],"best":[155],"knowledge,":[158],"work":[160],"is":[161],"effective":[166],"domain.":[174]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}