{"id":"https://openalex.org/W4225614914","doi":"https://doi.org/10.1109/snams53716.2021.9732112","title":"An Adaptive Black-box Defense against Trojan Attacks on Text Data","display_name":"An Adaptive Black-box Defense against Trojan Attacks on Text Data","publication_year":2021,"publication_date":"2021-12-06","ids":{"openalex":"https://openalex.org/W4225614914","doi":"https://doi.org/10.1109/snams53716.2021.9732112"},"language":"en","primary_location":{"id":"doi:10.1109/snams53716.2021.9732112","is_oa":false,"landing_page_url":"https://doi.org/10.1109/snams53716.2021.9732112","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 Eighth International Conference on Social Network Analysis, Management and Security (SNAMS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5039602712","display_name":"Fatima Sharadgah","orcid":"https://orcid.org/0000-0003-1633-9773"},"institutions":[{"id":"https://openalex.org/I156983542","display_name":"Jordan University of Science and Technology","ror":"https://ror.org/03y8mtb59","country_code":"JO","type":"education","lineage":["https://openalex.org/I156983542"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Fatima Alsharadgah","raw_affiliation_strings":["Jordan University of Science & Technology,Department of Computer Science,Irbid,Jordan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Jordan University of Science & Technology,Department of Computer Science,Irbid,Jordan","institution_ids":["https://openalex.org/I156983542"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062119199","display_name":"Abdallah Khreishah","orcid":"https://orcid.org/0000-0003-1583-713X"},"institutions":[{"id":"https://openalex.org/I118118575","display_name":"New Jersey Institute of Technology","ror":"https://ror.org/05e74xb87","country_code":"US","type":"education","lineage":["https://openalex.org/I118118575"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Abdallah Khreishah","raw_affiliation_strings":["New Jersey Institute of Technology,Electrical and Computer Engineering Department,Newark,NJ,USA,07102"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New Jersey Institute of Technology,Electrical and Computer Engineering Department,Newark,NJ,USA,07102","institution_ids":["https://openalex.org/I118118575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080263153","display_name":"Mahmoud Al-Ayyoub","orcid":null},"institutions":[{"id":"https://openalex.org/I156983542","display_name":"Jordan University of Science and Technology","ror":"https://ror.org/03y8mtb59","country_code":"JO","type":"education","lineage":["https://openalex.org/I156983542"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Mahmoud Al-Ayyoub","raw_affiliation_strings":["Jordan University of Science & Technology,Department of Computer Science,Irbid,Jordan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Jordan University of Science & Technology,Department of Computer Science,Irbid,Jordan","institution_ids":["https://openalex.org/I156983542"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032187551","display_name":"Yaser Jararweh","orcid":"https://orcid.org/0000-0002-4403-3846"},"institutions":[{"id":"https://openalex.org/I156983542","display_name":"Jordan University of Science and Technology","ror":"https://ror.org/03y8mtb59","country_code":"JO","type":"education","lineage":["https://openalex.org/I156983542"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Yaser Jararweh","raw_affiliation_strings":["Jordan University of Science & Technology,Department of Computer Science,Irbid,Jordan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Jordan University of Science & Technology,Department of Computer Science,Irbid,Jordan","institution_ids":["https://openalex.org/I156983542"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001112865","display_name":"Guanxiong Liu","orcid":"https://orcid.org/0000-0001-7620-5836"},"institutions":[{"id":"https://openalex.org/I118118575","display_name":"New Jersey Institute of Technology","ror":"https://ror.org/05e74xb87","country_code":"US","type":"education","lineage":["https://openalex.org/I118118575"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Guanxiong Liu","raw_affiliation_strings":["New Jersey Institute of Technology,Electrical and Computer Engineering Department,Newark,NJ,USA,07102"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New Jersey Institute of Technology,Electrical and Computer Engineering Department,Newark,NJ,USA,07102","institution_ids":["https://openalex.org/I118118575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008374141","display_name":"Issa Khalil","orcid":"https://orcid.org/0000-0002-7660-9512"},"institutions":[{"id":"https://openalex.org/I1301390666","display_name":"Qatar Airways (Qatar)","ror":"https://ror.org/01hx00y13","country_code":"QA","type":"company","lineage":["https://openalex.org/I1301390666"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Issa Khalil","raw_affiliation_strings":["Qatar Computing Research Institute, HBKU,Doha,Qatar","Qatar Computing Research Institute, HBKU, Doha, Qatar"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Qatar Computing Research Institute, HBKU,Doha,Qatar","institution_ids":["https://openalex.org/I1301390666"]},{"raw_affiliation_string":"Qatar Computing Research Institute, HBKU, Doha, Qatar","institution_ids":["https://openalex.org/I1301390666"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047142249","display_name":"Muhannad Almutiry","orcid":"https://orcid.org/0000-0002-3862-3129"},"institutions":[{"id":"https://openalex.org/I118590987","display_name":"Northern Border University","ror":"https://ror.org/03j9tzj20","country_code":"SA","type":"education","lineage":["https://openalex.org/I118590987"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Muhannad Almutiry","raw_affiliation_strings":["Northern Border University,Electrical Engineering,Arar,Saudi Arabia","Electrical Engineering, Northern Border University, Arar, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northern Border University,Electrical Engineering,Arar,Saudi Arabia","institution_ids":["https://openalex.org/I118590987"]},{"raw_affiliation_string":"Electrical Engineering, Northern Border University, Arar, Saudi Arabia","institution_ids":["https://openalex.org/I118590987"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5042602326","display_name":"Nasir Saeed","orcid":"https://orcid.org/0000-0002-5123-5139"},"institutions":[{"id":"https://openalex.org/I4210143942","display_name":"National University of Technology","ror":"https://ror.org/05e21fw44","country_code":"PK","type":"education","lineage":["https://openalex.org/I4210143942"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Nasir Saeed","raw_affiliation_strings":["National University of Technology,Department of Electrical Engineering,Islamabad,Pakistan","Department of Electrical Engineering, National University of Technology, Islamabad, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Technology,Department of Electrical Engineering,Islamabad,Pakistan","institution_ids":["https://openalex.org/I4210143942"]},{"raw_affiliation_string":"Department of Electrical Engineering, National University of Technology, Islamabad, Pakistan","institution_ids":["https://openalex.org/I4210143942"]}]}],"institutions":[],"countries_distinct_count":5,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9284999966621399,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.9154999852180481,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9850782155990601},{"id":"https://openalex.org/keywords/trojan","display_name":"Trojan","score":0.977320671081543},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6732036471366882},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5857073068618774},{"id":"https://openalex.org/keywords/white-box","display_name":"White box","score":0.5104862451553345},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.49972963333129883},{"id":"https://openalex.org/keywords/intuition","display_name":"Intuition","score":0.4680836796760559},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4254003167152405},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.42088061571121216},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.41854095458984375},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.39337411522865295},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.38912731409072876},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.37676018476486206},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3082849979400635}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9850782155990601},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.977320671081543},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6732036471366882},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5857073068618774},{"id":"https://openalex.org/C180932941","wikidata":"https://www.wikidata.org/wiki/Q997233","display_name":"White box","level":2,"score":0.5104862451553345},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.49972963333129883},{"id":"https://openalex.org/C132010649","wikidata":"https://www.wikidata.org/wiki/Q189222","display_name":"Intuition","level":2,"score":0.4680836796760559},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4254003167152405},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.42088061571121216},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.41854095458984375},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.39337411522865295},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.38912731409072876},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.37676018476486206},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3082849979400635},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/snams53716.2021.9732112","is_oa":false,"landing_page_url":"https://doi.org/10.1109/snams53716.2021.9732112","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 Eighth International Conference on Social Network Analysis, Management and Security (SNAMS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.699999988079071}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W2094340922","https://openalex.org/W2108598243","https://openalex.org/W2112796928","https://openalex.org/W2131744502","https://openalex.org/W2250539671","https://openalex.org/W2251803266","https://openalex.org/W2746600820","https://openalex.org/W2748789698","https://openalex.org/W2753783305","https://openalex.org/W2807363941","https://openalex.org/W2810065831","https://openalex.org/W2897865027","https://openalex.org/W2934843808","https://openalex.org/W2951526967","https://openalex.org/W2969215546","https://openalex.org/W2969312451","https://openalex.org/W2973217491","https://openalex.org/W2990270730","https://openalex.org/W2995164118","https://openalex.org/W3038046627","https://openalex.org/W3091939259","https://openalex.org/W3106412272","https://openalex.org/W3109409894","https://openalex.org/W3154565254","https://openalex.org/W3175732721","https://openalex.org/W3197655726","https://openalex.org/W4294170691","https://openalex.org/W4298140072","https://openalex.org/W6637162671","https://openalex.org/W6679775712","https://openalex.org/W6682691769","https://openalex.org/W6743581629","https://openalex.org/W6750462152","https://openalex.org/W6752600739","https://openalex.org/W6771533808","https://openalex.org/W6779690972","https://openalex.org/W6786058590","https://openalex.org/W6786651539"],"related_works":["https://openalex.org/W3106646114","https://openalex.org/W4308244459","https://openalex.org/W4221166349","https://openalex.org/W4200628936","https://openalex.org/W4387929148","https://openalex.org/W4389518867","https://openalex.org/W2047881532","https://openalex.org/W1984273188","https://openalex.org/W2727407240","https://openalex.org/W4313956065"],"abstract_inverted_index":{"Trojan":[0,43,81,138,145,165],"backdoor":[1,30,82],"is":[2,109,158,163],"a":[3,33,46,110],"poisoning":[4],"attack":[5],"against":[6,42],"Neural":[7],"Network":[8],"(NN)":[9],"classifiers":[10],"in":[11,49,92,151],"which":[12,50,108],"adversaries":[13],"try":[14],"to":[15,23,56,79,88,124,133,186],"exploit":[16],"the":[17,39,51,57,89,90,93,128,144,149,152,156,171,176,187,190],"(highly":[18],"desirable)":[19],"model":[20,27],"reuse":[21],"property":[22],"implant":[24],"Trojans":[25],"into":[26],"parameters":[28],"for":[29,102,118],"breaches":[31],"through":[32,66],"poisoned":[34],"training":[35],"process.":[36],"Most":[37],"of":[38,60,70,127,189],"proposed":[40],"defenses":[41,97],"attacks":[44],"assume":[45],"white-box":[47,75],"setup,":[48],"defender":[52],"either":[53],"has":[54],"access":[55],"inner":[58],"state":[59],"NN":[61,129],"or":[62],"can":[63],"run":[64,125],"back-propagation":[65],"it.":[67],"Moreover,":[68],"most":[69],"exiting":[71],"works":[72],"that":[73,121,164],"propose":[74,106],"and":[76,135],"black-box":[77,115],"methods":[78],"defend":[80],"focus":[83],"on":[84,175],"image":[85],"data.":[86,104],"Due":[87],"difference":[91],"data":[94,120],"structure,":[95],"these":[96],"cannot":[98],"be":[99],"directly":[100],"applied":[101],"textual":[103],"We":[105],"T-TROJDEF":[107,131],"more":[111,168],"practical":[112],"but":[113],"challenging":[114],"defense":[116],"method":[117],"text":[119],"only":[122,173],"needs":[123],"forward-pass":[126],"model.":[130],"tries":[132],"identify":[134],"filter":[136],"out":[137],"inputs":[139,141,166,180],"(i.e.,":[140],"augmented":[142],"with":[143],"trigger)":[146],"by":[147],"monitoring":[148],"changes":[150],"prediction":[153],"confidence":[154],"when":[155,183],"input":[157],"repeatedly":[159],"perturbed.":[160],"The":[161],"intuition":[162],"are":[167],"stable":[169],"as":[170],"misclassification":[172],"depends":[174],"trigger,":[177],"while":[178],"benign":[179],"will":[181],"suffer":[182],"perturbed":[184],"due":[185],"perturbation":[188],"classification":[191],"features.":[192]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}