{"id":"https://openalex.org/W4416251618","doi":"https://doi.org/10.1109/ijcnn64981.2025.11227936","title":"OCAGE: An Input-Level One-Class Backdoor Detection Method Using Feature Map Extraction for DNN","display_name":"OCAGE: An Input-Level One-Class Backdoor Detection Method Using Feature Map Extraction for DNN","publication_year":2025,"publication_date":"2025-06-30","ids":{"openalex":"https://openalex.org/W4416251618","doi":"https://doi.org/10.1109/ijcnn64981.2025.11227936"},"language":null,"primary_location":{"id":"doi:10.1109/ijcnn64981.2025.11227936","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn64981.2025.11227936","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5120701084","display_name":"Han Lin Tun","orcid":null},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Han Lin Tun","raw_affiliation_strings":["Shanghai Jiao Tong University,School of Cyber Science and Engineering,China,200240"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University,School of Cyber Science and Engineering,China,200240","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101650550","display_name":"Haiyang Yu","orcid":"https://orcid.org/0000-0001-9311-0230"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haiyang Yu","raw_affiliation_strings":["Shanghai Jiao Tong University,School of Cyber Science and Engineering,China,200240"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University,School of Cyber Science and Engineering,China,200240","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112667444","display_name":"Tian Xie","orcid":"https://orcid.org/0000-0002-0987-4666"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tian Xie","raw_affiliation_strings":["Shanghai Jiao Tong University,School of Cyber Science and Engineering,China,200240"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University,School of Cyber Science and Engineering,China,200240","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101382266","display_name":"Ping Yi","orcid":"https://orcid.org/0009-0000-8978-5964"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ping Yi","raw_affiliation_strings":["Shanghai Jiao Tong University,School of Cyber Science and Engineering,China,200240"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University,School of Cyber Science and Engineering,China,200240","institution_ids":["https://openalex.org/I183067930"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I183067930"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9207000136375427,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9207000136375427,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.02590000070631504,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.010599999688565731,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.8981000185012817},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.6866000294685364},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.560699999332428},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.5257999897003174},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.46810001134872437},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4496999979019165},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.44290000200271606},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.42080000042915344}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.8981000185012817},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7412999868392944},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.6866000294685364},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6492999792098999},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.560699999332428},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.5257999897003174},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.46810001134872437},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4496999979019165},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.44290000200271606},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.42080000042915344},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4205000102519989},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.41370001435279846},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.3971000015735626},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.362199991941452},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.34459999203681946},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.34369999170303345},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.31529998779296875},{"id":"https://openalex.org/C75564084","wikidata":"https://www.wikidata.org/wiki/Q5597085","display_name":"Graph embedding","level":3,"score":0.30300000309944153},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.2872999906539917},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2653000056743622},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.257099986076355},{"id":"https://openalex.org/C2776145971","wikidata":"https://www.wikidata.org/wiki/Q30673951","display_name":"Labeled data","level":2,"score":0.2506999969482422}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ijcnn64981.2025.11227936","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn64981.2025.11227936","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W1970088130","https://openalex.org/W2115627867","https://openalex.org/W2795033129","https://openalex.org/W2807363941","https://openalex.org/W2907492528","https://openalex.org/W2934843808","https://openalex.org/W2947133760","https://openalex.org/W2963327228","https://openalex.org/W2990270730","https://openalex.org/W3040266635","https://openalex.org/W3042368254","https://openalex.org/W3114687924","https://openalex.org/W3128663834","https://openalex.org/W3152758407","https://openalex.org/W3188772578","https://openalex.org/W4312329299","https://openalex.org/W4378438654","https://openalex.org/W4386076555","https://openalex.org/W4390873038"],"related_works":[],"abstract_inverted_index":{"Deep":[0],"Neural":[1,66],"Networks":[2,67],"(DNNs)":[3],"are":[4],"vulnerable":[5],"to":[6,69,94,116,133,169],"backdoor":[7,15,71],"attacks.":[8],"In":[9],"these":[10],"attacks,":[11],"an":[12,90],"adversary":[13],"inserts":[14],"triggers":[16,31],"during":[17,26,172],"the":[18,24,30,74,96,128,161,163],"training":[19],"phase,":[20],"causing":[21],"misclassification":[22],"of":[23,98,131,137],"model":[25,99,164],"inference":[27],"stage":[28],"when":[29],"present.":[32],"These":[33],"hidden":[34],"vulnerabilities":[35],"pose":[36],"significant":[37],"risks,":[38],"particularly":[39],"in":[40,141],"critical":[41],"applications.":[42],"To":[43],"address":[44],"this":[45],"issue,":[46],"we":[47,88,106],"propose":[48],"a":[49,59,79,113,152],"novel":[50],"One-Class":[51],"Activation":[52],"Graph":[53,65],"Embedding":[54],"(OCAGE)":[55],"method.":[56],"It":[57],"is":[58],"one-class":[60,114,153],"classification":[61],"method":[62,126],"that":[63,177],"leverages":[64,127],"(GNNs)":[68],"detect":[70],"samples":[72,119],"at":[73],"input":[75],"level,":[76],"requiring":[77,167],"only":[78],"small":[80],"clean":[81,121],"dataset":[82],"for":[83],"effective":[84],"sample":[85],"detection.":[86],"First,":[87],"design":[89],"efficient":[91],"model-to-graph":[92],"technique":[93],"extract":[95,134],"outputs":[97],"forward":[100],"propagation,":[101],"specifically":[102],"activation":[103,135,142],"values.":[104],"Then,":[105],"combine":[107],"self-supervised":[108],"generative":[109],"graph":[110],"pretraining":[111],"with":[112],"classifier":[115,154],"distinguish":[117],"poisoned":[118],"from":[120],"ones.":[122],"Our":[123],"proposed":[124],"OCAGE":[125,150,178],"representational":[129],"power":[130],"GNNs":[132],"features":[136],"inputs,":[138],"highlighting":[139],"deviations":[140],"patterns":[143],"between":[144],"normal":[145],"and":[146],"malicious":[147,170],"cases.":[148],"Furthermore,":[149],"employs":[151],"trained":[155],"exclusively":[156],"on":[157],"benign":[158],"samples,":[159],"ensuring":[160],"condition":[162],"owner":[165],"without":[166],"access":[168],"examples":[171],"training.":[173],"The":[174],"experiments":[175],"demonstrate":[176],"significantly":[179],"outperforming":[180],"existing":[181],"methods.":[182]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-11-14T00:00:00"}