{"id":"https://openalex.org/W4365807860","doi":"https://doi.org/10.1109/ojcs.2023.3267221","title":"Backdoor Attacks to Deep Learning Models and Countermeasures: A Survey","display_name":"Backdoor Attacks to Deep Learning Models and Countermeasures: A Survey","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4365807860","doi":"https://doi.org/10.1109/ojcs.2023.3267221"},"language":"en","primary_location":{"id":"doi:10.1109/ojcs.2023.3267221","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcs.2023.3267221","pdf_url":"https://ieeexplore.ieee.org/ielx7/8782664/9024218/10102775.pdf","source":{"id":"https://openalex.org/S4210176459","display_name":"IEEE Open Journal of the Computer Society","issn_l":"2644-1268","issn":["2644-1268"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Computer Society","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/8782664/9024218/10102775.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100332356","display_name":"Yudong Li","orcid":"https://orcid.org/0000-0001-6779-8836"},"institutions":[{"id":"https://openalex.org/I139660479","display_name":"Central South University","ror":"https://ror.org/00f1zfq44","country_code":"CN","type":"education","lineage":["https://openalex.org/I139660479"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yudong Li","raw_affiliation_strings":["School of Computer Science and Engineering, Central South University, Changsha, China","School of Computer Science and Engineering, Central South University, Changsha, Hunan, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Central South University, Changsha, China","institution_ids":["https://openalex.org/I139660479"]},{"raw_affiliation_string":"School of Computer Science and Engineering, Central South University, Changsha, Hunan, China","institution_ids":["https://openalex.org/I139660479"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005250767","display_name":"Shigeng Zhang","orcid":"https://orcid.org/0000-0001-5351-7239"},"institutions":[{"id":"https://openalex.org/I139660479","display_name":"Central South University","ror":"https://ror.org/00f1zfq44","country_code":"CN","type":"education","lineage":["https://openalex.org/I139660479"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shigeng Zhang","raw_affiliation_strings":["School of Computer Science and Engineering, Central South University, Changsha, China","School of Computer Science and Engineering, Central South University, Changsha, Hunan, China"],"raw_orcid":"https://orcid.org/0000-0001-5351-7239","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Central South University, Changsha, China","institution_ids":["https://openalex.org/I139660479"]},{"raw_affiliation_string":"School of Computer Science and Engineering, Central South University, Changsha, Hunan, China","institution_ids":["https://openalex.org/I139660479"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100442307","display_name":"Weiping Wang","orcid":"https://orcid.org/0000-0001-5255-5639"},"institutions":[{"id":"https://openalex.org/I139660479","display_name":"Central South University","ror":"https://ror.org/00f1zfq44","country_code":"CN","type":"education","lineage":["https://openalex.org/I139660479"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weiping Wang","raw_affiliation_strings":["School of Computer Science and Engineering, Central South University, Changsha, China","School of Computer Science and Engineering, Central South University, Changsha, Hunan, China"],"raw_orcid":"https://orcid.org/0000-0001-5255-5639","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Central South University, Changsha, China","institution_ids":["https://openalex.org/I139660479"]},{"raw_affiliation_string":"School of Computer Science and Engineering, Central South University, Changsha, Hunan, China","institution_ids":["https://openalex.org/I139660479"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056484077","display_name":"Hong Song","orcid":"https://orcid.org/0000-0002-1677-425X"},"institutions":[{"id":"https://openalex.org/I139660479","display_name":"Central South University","ror":"https://ror.org/00f1zfq44","country_code":"CN","type":"education","lineage":["https://openalex.org/I139660479"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hong Song","raw_affiliation_strings":["School of Computer Science and Engineering, Central South University, Changsha, China","School of Computer Science and Engineering, Central South University, Changsha, Hunan, China"],"raw_orcid":"https://orcid.org/0000-0002-1677-425X","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Central South University, Changsha, China","institution_ids":["https://openalex.org/I139660479"]},{"raw_affiliation_string":"School of Computer Science and Engineering, Central South University, Changsha, Hunan, China","institution_ids":["https://openalex.org/I139660479"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I139660479"],"apc_list":{"value":1750,"currency":"USD","value_usd":1750},"apc_paid":{"value":1750,"currency":"USD","value_usd":1750},"fwci":4.1243,"has_fulltext":true,"cited_by_count":26,"citation_normalized_percentile":{"value":0.94805274,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"4","issue":null,"first_page":"134","last_page":"146"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9782999753952026,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9714999794960022,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.999586820602417},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6839554905891418},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5701709985733032},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5594903230667114},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.4534095525741577},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.41997548937797546}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.999586820602417},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6839554905891418},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5701709985733032},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5594903230667114},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4534095525741577},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.41997548937797546}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/ojcs.2023.3267221","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcs.2023.3267221","pdf_url":"https://ieeexplore.ieee.org/ielx7/8782664/9024218/10102775.pdf","source":{"id":"https://openalex.org/S4210176459","display_name":"IEEE Open Journal of the Computer Society","issn_l":"2644-1268","issn":["2644-1268"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Computer Society","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:d5d48f5a8dda431fb6350febd155df43","is_oa":true,"landing_page_url":"https://doaj.org/article/d5d48f5a8dda431fb6350febd155df43","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Open Journal of the Computer Society, Vol 4, Pp 134-146 (2023)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/ojcs.2023.3267221","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcs.2023.3267221","pdf_url":"https://ieeexplore.ieee.org/ielx7/8782664/9024218/10102775.pdf","source":{"id":"https://openalex.org/S4210176459","display_name":"IEEE Open Journal of the Computer Society","issn_l":"2644-1268","issn":["2644-1268"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Computer Society","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4229103011","display_name":null,"funder_award_id":"62272486","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4365807860.pdf","grobid_xml":"https://content.openalex.org/works/W4365807860.grobid-xml"},"referenced_works_count":136,"referenced_works":["https://openalex.org/W1552056088","https://openalex.org/W1673923490","https://openalex.org/W1782590233","https://openalex.org/W1999798000","https://openalex.org/W2019464758","https://openalex.org/W2075972939","https://openalex.org/W2088338354","https://openalex.org/W2108598243","https://openalex.org/W2112796928","https://openalex.org/W2117130368","https://openalex.org/W2117876524","https://openalex.org/W2119112357","https://openalex.org/W2121289914","https://openalex.org/W2126628495","https://openalex.org/W2183341477","https://openalex.org/W2325939864","https://openalex.org/W2335728318","https://openalex.org/W2535690855","https://openalex.org/W2536626143","https://openalex.org/W2560162835","https://openalex.org/W2560647685","https://openalex.org/W2748789698","https://openalex.org/W2750384547","https://openalex.org/W2774423163","https://openalex.org/W2807363941","https://openalex.org/W2810065831","https://openalex.org/W2898759955","https://openalex.org/W2903356604","https://openalex.org/W2934843808","https://openalex.org/W2950048339","https://openalex.org/W2963839617","https://openalex.org/W2966104011","https://openalex.org/W2971661634","https://openalex.org/W2973217491","https://openalex.org/W2984942115","https://openalex.org/W2988471847","https://openalex.org/W2990270730","https://openalex.org/W2995164118","https://openalex.org/W3034258347","https://openalex.org/W3034579202","https://openalex.org/W3035367371","https://openalex.org/W3041668106","https://openalex.org/W3042368254","https://openalex.org/W3043819440","https://openalex.org/W3044223678","https://openalex.org/W3047587361","https://openalex.org/W3081178496","https://openalex.org/W3083185154","https://openalex.org/W3092005433","https://openalex.org/W3100405174","https://openalex.org/W3106646114","https://openalex.org/W3107337211","https://openalex.org/W3112001526","https://openalex.org/W3118608800","https://openalex.org/W3121099749","https://openalex.org/W3121478722","https://openalex.org/W3126724309","https://openalex.org/W3163083600","https://openalex.org/W3163760706","https://openalex.org/W3167002899","https://openalex.org/W3167334189","https://openalex.org/W3173784240","https://openalex.org/W3175052694","https://openalex.org/W3175215793","https://openalex.org/W3176270593","https://openalex.org/W3178167397","https://openalex.org/W3188772578","https://openalex.org/W3192036897","https://openalex.org/W3195462295","https://openalex.org/W3196631414","https://openalex.org/W3196832521","https://openalex.org/W3199529221","https://openalex.org/W3204619801","https://openalex.org/W3205696278","https://openalex.org/W3205850172","https://openalex.org/W3206773754","https://openalex.org/W3211600423","https://openalex.org/W3213619580","https://openalex.org/W3214302844","https://openalex.org/W4200633038","https://openalex.org/W4214537185","https://openalex.org/W4214563788","https://openalex.org/W4214564822","https://openalex.org/W4214680449","https://openalex.org/W4214812658","https://openalex.org/W4223940398","https://openalex.org/W4226313456","https://openalex.org/W4226394973","https://openalex.org/W4252979261","https://openalex.org/W4285601739","https://openalex.org/W4287062987","https://openalex.org/W4287118252","https://openalex.org/W4287207231","https://openalex.org/W4287998266","https://openalex.org/W4288093767","https://openalex.org/W4289300166","https://openalex.org/W4296857612","https://openalex.org/W4312329299","https://openalex.org/W4312406341","https://openalex.org/W4312700692","https://openalex.org/W4385970319","https://openalex.org/W6637162671","https://openalex.org/W6638046521","https://openalex.org/W6703116779","https://openalex.org/W6743581629","https://openalex.org/W6743688258","https://openalex.org/W6746897123","https://openalex.org/W6752600739","https://openalex.org/W6756074407","https://openalex.org/W6756333562","https://openalex.org/W6756840679","https://openalex.org/W6758684365","https://openalex.org/W6767183785","https://openalex.org/W6770286897","https://openalex.org/W6770897281","https://openalex.org/W6771533808","https://openalex.org/W6775918922","https://openalex.org/W6776469819","https://openalex.org/W6780246824","https://openalex.org/W6780735040","https://openalex.org/W6781420246","https://openalex.org/W6787972765","https://openalex.org/W6788876066","https://openalex.org/W6793958797","https://openalex.org/W6795782005","https://openalex.org/W6796340106","https://openalex.org/W6797144289","https://openalex.org/W6797626799","https://openalex.org/W6799444384","https://openalex.org/W6800099408","https://openalex.org/W6802396951","https://openalex.org/W6802862418","https://openalex.org/W6803277473","https://openalex.org/W6803329705","https://openalex.org/W6804981195","https://openalex.org/W7036927745"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W3015678314","https://openalex.org/W4281902577","https://openalex.org/W4200629851","https://openalex.org/W3009072493","https://openalex.org/W4386185023","https://openalex.org/W4317672133","https://openalex.org/W3140988292","https://openalex.org/W4386080799","https://openalex.org/W4309417370"],"abstract_inverted_index":{"Backdoor":[0],"attacks":[1,71,79,94,113,132],"have":[2,80],"severely":[3],"threatened":[4],"deep":[5],"neural":[6],"network":[7],"(DNN)":[8],"models":[9],"in":[10,29,83,136,166],"the":[11,18,30,37,40,43,51,58,109,115,124,138,167],"past":[12],"several":[13],"years.":[14,85],"In":[15,100],"backdoor":[16,70,93,112,121,131],"attacks,":[17,122],"attackers":[19],"try":[20],"to":[21,35,75,118,159],"plant":[22],"hidden":[23],"backdoors":[24],"into":[25],"DNN":[26],"models,":[27],"either":[28],"training":[31],"or":[32],"inference":[33],"stage,":[34],"mislead":[36],"output":[38],"of":[39,53,92,108,111],"model":[41],"when":[42],"input":[44],"contains":[45],"some":[46],"specified":[47],"triggers":[48],"without":[49],"affecting":[50],"prediction":[52],"normal":[54],"inputs":[55],"not":[56],"containing":[57],"triggers.":[59],"As":[60],"a":[61,87,105],"rapidly":[62],"developing":[63,73],"topic,":[64],"numerous":[65],"works":[66],"on":[67],"designing":[68],"various":[69],"and":[72,89,95,114,133,142,148,150,162],"techniques":[74],"defend":[76,119],"against":[77,120],"such":[78],"been":[81],"proposed":[82],"recent":[84],"However,":[86],"comprehensive":[88],"holistic":[90],"overview":[91,107],"countermeasures":[96],"is":[97],"still":[98],"missing.":[99],"this":[101],"paper,":[102],"we":[103],"provide":[104],"systematic":[106],"design":[110],"defense":[116,134],"strategies":[117,135],"covering":[123],"latest":[125],"published":[126],"works.":[127],"We":[128,155],"review":[129],"representative":[130],"both":[137],"computer":[139],"vision":[140],"domain":[141],"other":[143],"domains,":[144],"discuss":[145],"their":[146],"pros":[147],"cons,":[149],"make":[151],"comparisons":[152],"among":[153],"them.":[154],"outline":[156],"key":[157],"challenges":[158],"be":[160],"addressed":[161],"potential":[163],"research":[164],"directions":[165],"future.":[168]},"counts_by_year":[{"year":2025,"cited_by_count":20},{"year":2024,"cited_by_count":6}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}