{"id":"https://openalex.org/W4225750584","doi":"https://doi.org/10.1109/infocom48880.2022.9796974","title":"Backdoor Defense with Machine Unlearning","display_name":"Backdoor Defense with Machine Unlearning","publication_year":2022,"publication_date":"2022-05-02","ids":{"openalex":"https://openalex.org/W4225750584","doi":"https://doi.org/10.1109/infocom48880.2022.9796974"},"language":"en","primary_location":{"id":"doi:10.1109/infocom48880.2022.9796974","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infocom48880.2022.9796974","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE INFOCOM 2022 - IEEE Conference on Computer Communications","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100355950","display_name":"Yang Liu","orcid":"https://orcid.org/0000-0002-6276-1468"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Liu","raw_affiliation_strings":["State Key Laboratory of Integrated Services Networks (ISN)","Shaanxi Key Laboratory of Network and System Security, Xidian University, Xi'an, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Integrated Services Networks (ISN)","institution_ids":[]},{"raw_affiliation_string":"Shaanxi Key Laboratory of Network and System Security, Xidian University, Xi'an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104198236","display_name":"Mingyuan Fan","orcid":null},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingyuan Fan","raw_affiliation_strings":["Fuzhou University,College of Computer and Data Science,Fuzhou,China","College of Computer and Data Science, Fuzhou University, Fuzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fuzhou University,College of Computer and Data Science,Fuzhou,China","institution_ids":["https://openalex.org/I80947539"]},{"raw_affiliation_string":"College of Computer and Data Science, Fuzhou University, Fuzhou, China","institution_ids":["https://openalex.org/I80947539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114734448","display_name":"Cen Chen","orcid":"https://orcid.org/0000-0003-0325-1705"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Cen Chen","raw_affiliation_strings":["East China Normal University,School of Data Science and Engineering,Shanghai,China","School of Data Science and Engineering, East China Normal University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"East China Normal University,School of Data Science and Engineering,Shanghai,China","institution_ids":["https://openalex.org/I66867065"]},{"raw_affiliation_string":"School of Data Science and Engineering, East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058120371","display_name":"Ximeng Liu","orcid":"https://orcid.org/0000-0002-4238-3295"},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ximeng Liu","raw_affiliation_strings":["Fuzhou University,College of Computer and Data Science,Fuzhou,China","College of Computer and Data Science, Fuzhou University, Fuzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fuzhou University,College of Computer and Data Science,Fuzhou,China","institution_ids":["https://openalex.org/I80947539"]},{"raw_affiliation_string":"College of Computer and Data Science, Fuzhou University, Fuzhou, China","institution_ids":["https://openalex.org/I80947539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101788269","display_name":"Zhuo Ma","orcid":"https://orcid.org/0000-0002-3424-0139"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhuo Ma","raw_affiliation_strings":["State Key Laboratory of Integrated Services Networks (ISN)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Integrated Services Networks (ISN)","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100336151","display_name":"Li Wang","orcid":"https://orcid.org/0000-0003-0181-712X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li Wang","raw_affiliation_strings":["Ant Group,Hangzhou,China","Ant Group, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ant Group,Hangzhou,China","institution_ids":[]},{"raw_affiliation_string":"Ant Group, Hangzhou, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5012016098","display_name":"Jianfeng Ma","orcid":"https://orcid.org/0000-0003-4251-1143"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianfeng Ma","raw_affiliation_strings":["State Key Laboratory of Integrated Services Networks (ISN)","Shaanxi Key Laboratory of Network and System Security, Xidian University, Xi'an, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Integrated Services Networks (ISN)","institution_ids":[]},{"raw_affiliation_string":"Shaanxi Key Laboratory of Network and System Security, Xidian University, Xi'an, China","institution_ids":["https://openalex.org/I149594827"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":12.4811,"has_fulltext":false,"cited_by_count":84,"citation_normalized_percentile":{"value":0.99066613,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"280","last_page":"289"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9850000143051147,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9817000031471252,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9976671934127808},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7411858439445496},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5055861473083496},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.46266746520996094},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.42032793164253235},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3519183397293091}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9976671934127808},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7411858439445496},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5055861473083496},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.46266746520996094},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.42032793164253235},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3519183397293091}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/infocom48880.2022.9796974","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infocom48880.2022.9796974","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE INFOCOM 2022 - IEEE Conference on Computer Communications","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.7900000214576721,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321878","display_name":"Natural Science Foundation of Fujian Province","ror":null},{"id":"https://openalex.org/F4320323230","display_name":"Xidian University","ror":"https://ror.org/05s92vm98"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":41,"referenced_works":["https://openalex.org/W1488996941","https://openalex.org/W2748789698","https://openalex.org/W2753783305","https://openalex.org/W2807363941","https://openalex.org/W2898759955","https://openalex.org/W2934843808","https://openalex.org/W2966689772","https://openalex.org/W2982977353","https://openalex.org/W2987696486","https://openalex.org/W2990270730","https://openalex.org/W3012113073","https://openalex.org/W3014835904","https://openalex.org/W3024103409","https://openalex.org/W3034258347","https://openalex.org/W3039575763","https://openalex.org/W3040639636","https://openalex.org/W3083185154","https://openalex.org/W3093137868","https://openalex.org/W3096264229","https://openalex.org/W3108535146","https://openalex.org/W3109235236","https://openalex.org/W3114686421","https://openalex.org/W3120302859","https://openalex.org/W3121478722","https://openalex.org/W3154155772","https://openalex.org/W3189092450","https://openalex.org/W4288093767","https://openalex.org/W6743581629","https://openalex.org/W6743986261","https://openalex.org/W6747837047","https://openalex.org/W6756333562","https://openalex.org/W6767183785","https://openalex.org/W6770046844","https://openalex.org/W6770421261","https://openalex.org/W6775685930","https://openalex.org/W6780439892","https://openalex.org/W6780547051","https://openalex.org/W6782308813","https://openalex.org/W6788392909","https://openalex.org/W6788876066","https://openalex.org/W6792711564"],"related_works":["https://openalex.org/W4401407399","https://openalex.org/W2961085424","https://openalex.org/W4306674287","https://openalex.org/W4387369504","https://openalex.org/W3046775127","https://openalex.org/W4394896187","https://openalex.org/W3170094116","https://openalex.org/W4386462264","https://openalex.org/W3107602296","https://openalex.org/W4364306694"],"abstract_inverted_index":{"Backdoor":[0],"injection":[1,116],"attack":[2,184],"is":[3,60,78],"an":[4,85],"emerging":[5],"threat":[6],"to":[7,62,80,112,123,157],"the":[8,22,36,40,64,69,73,81,90,99,114,120,125,140,145,151,154,183],"security":[9],"of":[10,83,150,187,190],"neural":[11],"networks,":[12],"however,":[13],"there":[14],"still":[15],"exist":[16],"limited":[17],"effective":[18],"defense":[19,51],"methods":[20],"against":[21],"attack.":[23],"In":[24],"this":[25],"paper,":[26],"we":[27],"propose":[28],"BAERASER,":[29],"a":[30,129],"novel":[31],"method":[32],"that":[33,178],"can":[34,94,180],"erase":[35,124],"backdoor":[37,50,115,167,192],"injected":[38],"into":[39],"victim":[41,70,91,121],"model":[42,122],"through":[43,128],"machine":[44,135,142],"unlearning.":[45],"Specifically,":[46],"BAERASER":[47,106,179],"mainly":[48],"implements":[49],"in":[52],"two":[53],"key":[54],"steps.":[55],"First,":[56],"trigger":[57,65,74,110],"pattern":[58,75],"recovery":[59,76],"conducted":[61],"extract":[63],"patterns":[66,111],"infected":[67],"by":[68,98,194],"model.":[71,104],"Here,":[72],"problem":[77],"equivalent":[79],"one":[82],"extracting":[84],"unknown":[86],"noise":[87],"distribution":[88],"from":[89],"model,":[92],"which":[93],"be":[95],"easily":[96],"resolved":[97],"entropy":[100],"maximization":[101],"based":[102,134],"generative":[103],"Subsequently,":[105],"leverages":[107],"these":[108],"recovered":[109],"reverse":[113],"procedure":[117],"and":[118,162],"induce":[119],"polluted":[126],"memories":[127],"newly":[130],"designed":[131],"gradient":[132],"ascent":[133],"unlearning":[136,143],"method.":[137],"Compared":[138],"with":[139],"previous":[141],"solutions,":[144],"proposed":[146],"approach":[147],"gets":[148],"rid":[149],"reliance":[152],"on":[153,166,196],"full":[155],"access":[156],"training":[158],"data":[159],"for":[160],"retraining":[161],"shows":[163],"higher":[164],"effectiveness":[165],"erasing":[168],"than":[169],"existing":[170],"fine-tuning":[171],"or":[172],"pruning":[173],"methods.":[174],"Moreover,":[175],"experiments":[176],"show":[177],"averagely":[181],"lower":[182],"success":[185],"rates":[186],"three":[188],"kinds":[189],"state-of-the-art":[191],"attacks":[193],"99%":[195],"four":[197],"benchmark":[198],"datasets.":[199]},"counts_by_year":[{"year":2026,"cited_by_count":10},{"year":2025,"cited_by_count":36},{"year":2024,"cited_by_count":27},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":4}],"updated_date":"2026-07-30T17:31:21.811387","created_date":"2025-10-10T00:00:00"}