{"id":"https://openalex.org/W4385080308","doi":"https://doi.org/10.1109/sp46215.2023.10179308","title":"Disguising Attacks with Explanation-Aware Backdoors","display_name":"Disguising Attacks with Explanation-Aware Backdoors","publication_year":2023,"publication_date":"2023-05-01","ids":{"openalex":"https://openalex.org/W4385080308","doi":"https://doi.org/10.1109/sp46215.2023.10179308"},"language":"en","primary_location":{"id":"doi:10.1109/sp46215.2023.10179308","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179308","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5047556819","display_name":"Maximilian Noppel","orcid":"https://orcid.org/0000-0003-1930-8323"},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Maximilian Noppel","raw_affiliation_strings":["Karlsruhe Institute of Technology,KASTEL Security Research Labs,Germany","KASTEL Security Research Labs, Karlsruhe Institute of Technology, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Karlsruhe Institute of Technology,KASTEL Security Research Labs,Germany","institution_ids":["https://openalex.org/I102335020"]},{"raw_affiliation_string":"KASTEL Security Research Labs, Karlsruhe Institute of Technology, Germany","institution_ids":["https://openalex.org/I102335020"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054873595","display_name":"Luk\u00e1\u0161 Peter","orcid":"https://orcid.org/0000-0003-4351-8291"},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Lukas Peter","raw_affiliation_strings":["Karlsruhe Institute of Technology,KASTEL Security Research Labs,Germany","KASTEL Security Research Labs, Karlsruhe Institute of Technology, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Karlsruhe Institute of Technology,KASTEL Security Research Labs,Germany","institution_ids":["https://openalex.org/I102335020"]},{"raw_affiliation_string":"KASTEL Security Research Labs, Karlsruhe Institute of Technology, Germany","institution_ids":["https://openalex.org/I102335020"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5040751355","display_name":"Christian Wressnegger","orcid":"https://orcid.org/0009-0007-1493-9552"},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Christian Wressnegger","raw_affiliation_strings":["Karlsruhe Institute of Technology,KASTEL Security Research Labs,Germany","KASTEL Security Research Labs, Karlsruhe Institute of Technology, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Karlsruhe Institute of Technology,KASTEL Security Research Labs,Germany","institution_ids":["https://openalex.org/I102335020"]},{"raw_affiliation_string":"KASTEL Security Research Labs, Karlsruhe Institute of Technology, Germany","institution_ids":["https://openalex.org/I102335020"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I102335020"],"apc_list":null,"apc_paid":null,"fwci":4.958,"has_fulltext":false,"cited_by_count":23,"citation_normalized_percentile":{"value":0.96349581,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"664","last_page":"681"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9940000176429749,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7176505923271179},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5942613482475281}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7176505923271179},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5942613482475281}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/sp46215.2023.10179308","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179308","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.46000000834465027,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320311649","display_name":"Ministry of Education","ror":"https://ror.org/036nq5137"},{"id":"https://openalex.org/F4320325698","display_name":"Helmholtz Association","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":104,"referenced_works":["https://openalex.org/W1787224781","https://openalex.org/W2067713319","https://openalex.org/W2086294222","https://openalex.org/W2113651538","https://openalex.org/W2122672392","https://openalex.org/W2133665775","https://openalex.org/W2150165932","https://openalex.org/W2180612164","https://openalex.org/W2194775991","https://openalex.org/W2195388612","https://openalex.org/W2295107390","https://openalex.org/W2346578521","https://openalex.org/W2462831000","https://openalex.org/W2516809705","https://openalex.org/W2543927648","https://openalex.org/W2603766943","https://openalex.org/W2606462007","https://openalex.org/W2620038827","https://openalex.org/W2738588019","https://openalex.org/W2744095836","https://openalex.org/W2753783305","https://openalex.org/W2765793020","https://openalex.org/W2774423163","https://openalex.org/W2902351501","https://openalex.org/W2905423756","https://openalex.org/W2921802966","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W2962763344","https://openalex.org/W2962834855","https://openalex.org/W2962843949","https://openalex.org/W2962858109","https://openalex.org/W2963564844","https://openalex.org/W2963857521","https://openalex.org/W2971661634","https://openalex.org/W2979200397","https://openalex.org/W2981485575","https://openalex.org/W2982699810","https://openalex.org/W2988471847","https://openalex.org/W3005086430","https://openalex.org/W3006874766","https://openalex.org/W3007305010","https://openalex.org/W3015481738","https://openalex.org/W3035253074","https://openalex.org/W3039098095","https://openalex.org/W3081178496","https://openalex.org/W3090855408","https://openalex.org/W3091163785","https://openalex.org/W3096425977","https://openalex.org/W3101609372","https://openalex.org/W3110285749","https://openalex.org/W3112001526","https://openalex.org/W3114686421","https://openalex.org/W3115279145","https://openalex.org/W3118608800","https://openalex.org/W3170720090","https://openalex.org/W3172381285","https://openalex.org/W3189812816","https://openalex.org/W3196286047","https://openalex.org/W4214537185","https://openalex.org/W4214680449","https://openalex.org/W4214708455","https://openalex.org/W4247200422","https://openalex.org/W4293363567","https://openalex.org/W4293846201","https://openalex.org/W4293861706","https://openalex.org/W6637162671","https://openalex.org/W6637242042","https://openalex.org/W6637373629","https://openalex.org/W6640425456","https://openalex.org/W6681608319","https://openalex.org/W6685133223","https://openalex.org/W6704488215","https://openalex.org/W6718683173","https://openalex.org/W6729822694","https://openalex.org/W6734171162","https://openalex.org/W6734194636","https://openalex.org/W6735913928","https://openalex.org/W6736518430","https://openalex.org/W6737947904","https://openalex.org/W6739575509","https://openalex.org/W6746897123","https://openalex.org/W6750404860","https://openalex.org/W6750462152","https://openalex.org/W6751839145","https://openalex.org/W6753153400","https://openalex.org/W6754669440","https://openalex.org/W6756943956","https://openalex.org/W6757081344","https://openalex.org/W6758853676","https://openalex.org/W6759129252","https://openalex.org/W6761100157","https://openalex.org/W6764249507","https://openalex.org/W6767011042","https://openalex.org/W6770286897","https://openalex.org/W6771533808","https://openalex.org/W6774289986","https://openalex.org/W6775074090","https://openalex.org/W6779272815","https://openalex.org/W6779823587","https://openalex.org/W6784472380","https://openalex.org/W6784558051","https://openalex.org/W6787959460","https://openalex.org/W6787972765"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Explainable":[0],"machine":[1,43],"learning":[2,44],"holds":[3],"great":[4],"potential":[5],"for":[6,68,104],"analyzing":[7],"and":[8,26,106],"understanding":[9],"learning-based":[10],"systems.":[11],"These":[12],"methods":[13,109],"can,":[14],"however,":[15],"be":[16],"manipulated":[17],"to":[18,24,35,47,74,85,117],"present":[19],"unfaithful":[20],"explanations,":[21],"giving":[22],"rise":[23],"powerful":[25],"stealthy":[27],"adversaries.":[28],"In":[29],"this":[30],"paper,":[31],"we":[32,50,115],"demonstrate":[33],"how":[34],"fully":[36],"disguise":[37],"the":[38,52,76,79,83,90,111],"adversarial":[39],"operation":[40],"of":[41,78,89,100],"a":[42,93,119],"model.":[45],"Similar":[46],"neural":[48],"backdoors,":[49],"change":[51],"model\u2019s":[53],"prediction":[54],"upon":[55],"trigger":[56,80],"presence":[57,77],"but":[58],"simultaneously":[59],"fool":[60],"an":[61,72],"explanation":[62,84,108],"method":[63],"that":[64],"is":[65],"applied":[66],"post-hoc":[67],"analysis.":[69],"This":[70],"enables":[71],"adversary":[73],"hide":[75],"or":[81],"point":[82],"entirely":[86],"different":[87,98],"portions":[88],"input,":[91],"throwing":[92],"red":[94],"herring.":[95],"We":[96],"analyze":[97],"manifestations":[99],"these":[101],"explanation-aware":[102],"backdoors":[103],"gradient-":[105],"propagation-based":[107],"in":[110],"image":[112],"domain,":[113],"before":[114],"resume":[116],"conduct":[118],"red-herring":[120],"attack":[121],"against":[122],"malware":[123],"classification.":[124]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":10},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":1}],"updated_date":"2026-08-08T07:41:36.138363","created_date":"2025-10-10T00:00:00"}