{"id":"https://openalex.org/W4320031223","doi":"https://doi.org/10.1109/milcom55135.2022.10017466","title":"I Know Your Triggers: Defending Against Textual Backdoor Attacks with Benign Backdoor Augmentation","display_name":"I Know Your Triggers: Defending Against Textual Backdoor Attacks with Benign Backdoor Augmentation","publication_year":2022,"publication_date":"2022-11-28","ids":{"openalex":"https://openalex.org/W4320031223","doi":"https://doi.org/10.1109/milcom55135.2022.10017466"},"language":"en","primary_location":{"id":"doi:10.1109/milcom55135.2022.10017466","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/milcom55135.2022.10017466","pdf_url":null,"source":{"id":"https://openalex.org/S4363608114","display_name":"MILCOM 2022 - 2022 IEEE Military Communications Conference (MILCOM)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MILCOM 2022 - 2022 IEEE Military Communications Conference (MILCOM)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5001956754","display_name":"Yue Gao","orcid":"https://orcid.org/0000-0002-8901-9335"},"institutions":[{"id":"https://openalex.org/I135310074","display_name":"University of Wisconsin\u2013Madison","ror":"https://ror.org/01y2jtd41","country_code":"US","type":"education","lineage":["https://openalex.org/I135310074"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yue Gao","raw_affiliation_strings":["University of Wisconsin–Madison,Madison,WI,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Wisconsin–Madison,Madison,WI,USA","institution_ids":["https://openalex.org/I135310074"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059859993","display_name":"Jack W. Stokes","orcid":null},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jack W. Stokes","raw_affiliation_strings":["Microsoft,Redmond,WA,USA","Microsoft, Redmond, WA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft,Redmond,WA,USA","institution_ids":["https://openalex.org/I1290206253"]},{"raw_affiliation_string":"Microsoft, Redmond, WA, USA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011486524","display_name":"Manoj Prasad","orcid":null},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Manoj Ajith Prasad","raw_affiliation_strings":["Microsoft,Redmond,WA,USA","Microsoft, Redmond, WA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft,Redmond,WA,USA","institution_ids":["https://openalex.org/I1290206253"]},{"raw_affiliation_string":"Microsoft, Redmond, WA, USA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085771203","display_name":"Andrew T. Marshall","orcid":"https://orcid.org/0000-0002-0068-8138"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Andrew T. Marshall","raw_affiliation_strings":["Microsoft,Redmond,WA,USA","Microsoft, Redmond, WA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft,Redmond,WA,USA","institution_ids":["https://openalex.org/I1290206253"]},{"raw_affiliation_string":"Microsoft, Redmond, WA, USA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042450214","display_name":"Kassem Fawaz","orcid":"https://orcid.org/0000-0002-4609-7691"},"institutions":[{"id":"https://openalex.org/I135310074","display_name":"University of Wisconsin\u2013Madison","ror":"https://ror.org/01y2jtd41","country_code":"US","type":"education","lineage":["https://openalex.org/I135310074"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kassem Fawaz","raw_affiliation_strings":["University of Wisconsin–Madison,Madison,WI,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Wisconsin–Madison,Madison,WI,USA","institution_ids":["https://openalex.org/I135310074"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5079458476","display_name":"Emre K\u0131c\u0131man","orcid":"https://orcid.org/0000-0001-5429-468X"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Emre Kiciman","raw_affiliation_strings":["Microsoft,Redmond,WA,USA","Microsoft, Redmond, WA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft,Redmond,WA,USA","institution_ids":["https://openalex.org/I1290206253"]},{"raw_affiliation_string":"Microsoft, Redmond, WA, USA","institution_ids":["https://openalex.org/I1290206253"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.1687,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.47411644,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"442","last_page":"449"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9919000267982483,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9914000034332275,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9998555183410645},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6544594168663025},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.46385928988456726},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4382331669330597},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.42080947756767273},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3201013207435608}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9998555183410645},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6544594168663025},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46385928988456726},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4382331669330597},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.42080947756767273},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3201013207435608}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/milcom55135.2022.10017466","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/milcom55135.2022.10017466","pdf_url":null,"source":{"id":"https://openalex.org/S4363608114","display_name":"MILCOM 2022 - 2022 IEEE Military Communications Conference (MILCOM)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MILCOM 2022 - 2022 IEEE Military Communications Conference (MILCOM)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.47999998927116394}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W327991062","https://openalex.org/W1607035479","https://openalex.org/W2047281828","https://openalex.org/W2606555609","https://openalex.org/W2748789698","https://openalex.org/W2753783305","https://openalex.org/W2774423163","https://openalex.org/W2963126845","https://openalex.org/W2973217491","https://openalex.org/W2979826702","https://openalex.org/W2990270730","https://openalex.org/W3035367371","https://openalex.org/W3038046627","https://openalex.org/W3107337211","https://openalex.org/W3109235236","https://openalex.org/W3109409894","https://openalex.org/W3171158332","https://openalex.org/W3175052694","https://openalex.org/W3176270593","https://openalex.org/W4200512086","https://openalex.org/W4205337843","https://openalex.org/W4225688943","https://openalex.org/W4293363567","https://openalex.org/W4294679663","https://openalex.org/W6676984168","https://openalex.org/W6691459498","https://openalex.org/W6743581629","https://openalex.org/W6746897123","https://openalex.org/W6774904085","https://openalex.org/W6775918922","https://openalex.org/W6778883912","https://openalex.org/W6779690972","https://openalex.org/W6786651539","https://openalex.org/W6797333283"],"related_works":["https://openalex.org/W2961085424","https://openalex.org/W4306674287","https://openalex.org/W3046775127","https://openalex.org/W3107602296","https://openalex.org/W3170094116","https://openalex.org/W4386462264","https://openalex.org/W4364306694","https://openalex.org/W4312192474","https://openalex.org/W4283697347","https://openalex.org/W2989852175"],"abstract_inverted_index":{"A":[0,15],"backdoor":[1,7,50,82,88,98,119,127,149,159,197],"attack":[2],"seeks":[3],"to":[4,63,74,111,148,172],"introduce":[5],"a":[6,9,25,36,131],"into":[8],"machine":[10,71],"learning":[11,72],"model":[12,17,169],"during":[13],"training.":[14],"backdoored":[16],"performs":[18],"normally":[19],"on":[20,130],"regular":[21],"inputs":[22],"but":[23],"produces":[24],"target":[26,182],"output":[27],"chosen":[28],"by":[29,151],"the":[30,33,56,113,153,168,174,178,181,188],"attacker":[31],"when":[32],"input":[34],"contains":[35],"specific":[37],"trigger.":[38],"Backdoor":[39,108],"defenses":[40,83,93,99,201],"in":[41],"computer":[42],"vision":[43,116],"are":[44,84],"well-studied.":[45],"Previous":[46],"approaches":[47],"for":[48],"addressing":[49],"attacks":[51,89,128,150,198],"include":[52],"1)":[53],"cryptographically":[54],"hashing":[55],"original,":[57],"pristine":[58],"training":[59,143,154],"and":[60,68,117,155,161,180,193],"validation":[61,156],"datasets":[62,157],"provide":[64],"evidence":[65],"of":[66,134],"tampering":[67],"2)":[69],"using":[70],"algorithms":[73],"detect":[75],"potentially":[76],"modified":[77],"examples.":[78],"In":[79,102,165],"contrast,":[80],"textual":[81,87,97,118,126,137,196],"understudied.":[85],"While":[86],"have":[90,100],"started":[91],"evading":[92],"through":[94],"invisible":[95,125,195],"triggers,":[96],"lagged.":[101],"this":[103,166],"work,":[104],"we":[105],"propose":[106],"Benign":[107],"Augmentation":[109],"(BBA)":[110],"fill":[112],"gap":[114],"between":[115,177],"defenses.":[120],"We":[121],"discover":[122],"that":[123,187],"existing":[124,200],"rely":[129],"small":[132],"set":[133],"publicly":[135],"documented":[136],"patterns.":[138],"This":[139],"unique":[140],"limitation":[141],"enables":[142],"models":[144],"with":[145,158],"increased":[146],"robustness":[147],"augmenting":[152],"samples":[160],"their":[162],"true":[163],"labels.":[164],"way,":[167],"can":[170,190],"learn":[171],"discard":[173],"adversarial":[175],"connection":[176],"trigger":[179],"label.":[183],"Extensive":[184],"experiments":[185],"show":[186],"defense":[189],"effectively":[191],"mitigate":[192],"identify":[194],"where":[199],"fall":[202],"short.":[203]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}