{"id":"https://openalex.org/W4389546075","doi":"https://doi.org/10.1109/sp46215.2023.10351028","title":"Selective Amnesia: On Efficient, High-Fidelity and Blind Suppression of Backdoor Effects in Trojaned Machine Learning Models","display_name":"Selective Amnesia: On Efficient, High-Fidelity and Blind Suppression of Backdoor Effects in Trojaned Machine Learning Models","publication_year":2023,"publication_date":"2023-05-21","ids":{"openalex":"https://openalex.org/W4389546075","doi":"https://doi.org/10.1109/sp46215.2023.10351028"},"language":"en","primary_location":{"id":"doi:10.1109/sp46215.2023.10351028","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10351028","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100617073","display_name":"Rui Zhu","orcid":"https://orcid.org/0000-0002-9640-0716"},"institutions":[{"id":"https://openalex.org/I4210119109","display_name":"Indiana University Bloomington","ror":"https://ror.org/02k40bc56","country_code":"US","type":"education","lineage":["https://openalex.org/I4210119109","https://openalex.org/I592451"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Rui Zhu","raw_affiliation_strings":["Indiana University Bloomington"],"affiliations":[{"raw_affiliation_string":"Indiana University Bloomington","institution_ids":["https://openalex.org/I4210119109"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025881980","display_name":"Di Tang","orcid":"https://orcid.org/0000-0003-4770-4788"},"institutions":[{"id":"https://openalex.org/I4210119109","display_name":"Indiana University Bloomington","ror":"https://ror.org/02k40bc56","country_code":"US","type":"education","lineage":["https://openalex.org/I4210119109","https://openalex.org/I592451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Di Tang","raw_affiliation_strings":["Indiana University Bloomington"],"affiliations":[{"raw_affiliation_string":"Indiana University Bloomington","institution_ids":["https://openalex.org/I4210119109"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085045290","display_name":"Siyuan Tang","orcid":"https://orcid.org/0000-0001-9940-5072"},"institutions":[{"id":"https://openalex.org/I4210119109","display_name":"Indiana University Bloomington","ror":"https://ror.org/02k40bc56","country_code":"US","type":"education","lineage":["https://openalex.org/I4210119109","https://openalex.org/I592451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Siyuan Tang","raw_affiliation_strings":["Indiana University Bloomington"],"affiliations":[{"raw_affiliation_string":"Indiana University Bloomington","institution_ids":["https://openalex.org/I4210119109"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100333272","display_name":"Xiaofeng Wang","orcid":"https://orcid.org/0009-0001-6453-1826"},"institutions":[{"id":"https://openalex.org/I4210119109","display_name":"Indiana University Bloomington","ror":"https://ror.org/02k40bc56","country_code":"US","type":"education","lineage":["https://openalex.org/I4210119109","https://openalex.org/I592451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"XiaoFeng Wang","raw_affiliation_strings":["Indiana University Bloomington"],"affiliations":[{"raw_affiliation_string":"Indiana University Bloomington","institution_ids":["https://openalex.org/I4210119109"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078007096","display_name":"Haixu Tang","orcid":"https://orcid.org/0000-0001-8963-8155"},"institutions":[{"id":"https://openalex.org/I4210119109","display_name":"Indiana University Bloomington","ror":"https://ror.org/02k40bc56","country_code":"US","type":"education","lineage":["https://openalex.org/I4210119109","https://openalex.org/I592451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Haixu Tang","raw_affiliation_strings":["Indiana University Bloomington"],"affiliations":[{"raw_affiliation_string":"Indiana University Bloomington","institution_ids":["https://openalex.org/I4210119109"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5100617073"],"corresponding_institution_ids":["https://openalex.org/I4210119109"],"apc_list":null,"apc_paid":null,"fwci":1.7483,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.88008418,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"19"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9939000010490417,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9811867475509644},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7154257297515869},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.6383076906204224},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5883387923240662},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5314387679100037},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.515903115272522},{"id":"https://openalex.org/keywords/forgetting","display_name":"Forgetting","score":0.4819040596485138},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.47216054797172546},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.19078689813613892},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.11256170272827148},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.09990096092224121}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9811867475509644},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7154257297515869},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.6383076906204224},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5883387923240662},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5314387679100037},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.515903115272522},{"id":"https://openalex.org/C7149132","wikidata":"https://www.wikidata.org/wiki/Q1377840","display_name":"Forgetting","level":2,"score":0.4819040596485138},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.47216054797172546},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.19078689813613892},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.11256170272827148},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.09990096092224121},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.0},{"id":"https://openalex.org/C180747234","wikidata":"https://www.wikidata.org/wiki/Q23373","display_name":"Cognitive psychology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/sp46215.2023.10351028","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10351028","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":92,"referenced_works":["https://openalex.org/W2064675550","https://openalex.org/W2067713319","https://openalex.org/W2088911157","https://openalex.org/W2108598243","https://openalex.org/W2112796928","https://openalex.org/W2144578941","https://openalex.org/W2183341477","https://openalex.org/W2194775991","https://openalex.org/W2279098554","https://openalex.org/W2560647685","https://openalex.org/W2743151379","https://openalex.org/W2765101016","https://openalex.org/W2806984819","https://openalex.org/W2807363941","https://openalex.org/W2809090039","https://openalex.org/W2849849680","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W2952204734","https://openalex.org/W2952813363","https://openalex.org/W2955790312","https://openalex.org/W2962763344","https://openalex.org/W2963125010","https://openalex.org/W2963446712","https://openalex.org/W2964137095","https://openalex.org/W2964199361","https://openalex.org/W2965373594","https://openalex.org/W2966187620","https://openalex.org/W2971043187","https://openalex.org/W2971196067","https://openalex.org/W2978017171","https://openalex.org/W2979826702","https://openalex.org/W2986013765","https://openalex.org/W2990270730","https://openalex.org/W2997380714","https://openalex.org/W3034457371","https://openalex.org/W3044223678","https://openalex.org/W3047587361","https://openalex.org/W3074128044","https://openalex.org/W3081178496","https://openalex.org/W3093137868","https://openalex.org/W3100405174","https://openalex.org/W3105026501","https://openalex.org/W3107337211","https://openalex.org/W3113251160","https://openalex.org/W3113332968","https://openalex.org/W3114838227","https://openalex.org/W3118608800","https://openalex.org/W3127616799","https://openalex.org/W3136487127","https://openalex.org/W3152758407","https://openalex.org/W3156793535","https://openalex.org/W3170465383","https://openalex.org/W3174990531","https://openalex.org/W3175215793","https://openalex.org/W3206773754","https://openalex.org/W4214564822","https://openalex.org/W4230172274","https://openalex.org/W4281699777","https://openalex.org/W4283705168","https://openalex.org/W4287754097","https://openalex.org/W4287998266","https://openalex.org/W4289300166","https://openalex.org/W6637373629","https://openalex.org/W6745121187","https://openalex.org/W6751907932","https://openalex.org/W6752495264","https://openalex.org/W6756074407","https://openalex.org/W6756333562","https://openalex.org/W6757988401","https://openalex.org/W6761472960","https://openalex.org/W6761496057","https://openalex.org/W6761839128","https://openalex.org/W6764442487","https://openalex.org/W6766253520","https://openalex.org/W6766336336","https://openalex.org/W6766673545","https://openalex.org/W6768851824","https://openalex.org/W6770897281","https://openalex.org/W6774150056","https://openalex.org/W6779579784","https://openalex.org/W6781420246","https://openalex.org/W6784358365","https://openalex.org/W6787777936","https://openalex.org/W6787972765","https://openalex.org/W6788876066","https://openalex.org/W6789730115","https://openalex.org/W6791723494","https://openalex.org/W6802862418","https://openalex.org/W6839044539","https://openalex.org/W6839383656","https://openalex.org/W6946857974"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W3015678314","https://openalex.org/W4281902577","https://openalex.org/W4200629851","https://openalex.org/W3009072493","https://openalex.org/W4386185023","https://openalex.org/W4317672133","https://openalex.org/W3140988292","https://openalex.org/W4386080799","https://openalex.org/W4382469137"],"abstract_inverted_index":{"The":[0],"extensive":[1],"applications":[2],"of":[3,19,37,150,250,267,294,329,335,359,366,369],"deep":[4],"neural":[5],"network":[6,261],"(DNN)":[7],"and":[8,13,190,220,253,279,288,333],"its":[9,43,108],"increasingly":[10],"complicated":[11],"architecture":[12],"supply":[14],"chain":[15],"make":[16],"the":[17,30,34,54,73,116,148,180,196,201,214,241,248,260,268,305,315,324,327,330,336,351],"risk":[18],"backdoor":[20,51,74,191,246],"attacks":[21],"more":[22],"realistic":[23],"than":[24,344],"ever.":[25],"In":[26,121],"such":[27,68],"an":[28,69,77,244],"attack,":[29,70],"adversary":[31],"either":[32,90,296],"poisons":[33],"training":[35,44,289,345,370],"data":[36,118,286,361,371],"a":[38,49,64,92,105,126,137,154,166,177,184,223,264,320,346,356,364],"DNN":[39,168,224],"model":[40,106,169,203,347],"or":[41,101,302],"manipulates":[42],"process":[45,216],"to":[46,59,82,98,103,132,164,175,183,262],"stealthily":[47],"inject":[48],"covert":[50],"task,":[52,56,110],"alongside":[53],"primary":[55,109,189,197,269,331],"so":[57],"as":[58,217],"strategically":[60],"misclassify":[61],"inputs":[62],"carrying":[63],"trigger.":[65],"Defending":[66],"against":[67],"particularly":[71],"removing":[72],"effect":[75],"from":[76,348],"infected":[78],"model,":[79,181],"is":[80,96,119,163],"known":[81],"be":[83],"hard.":[84],"For":[85],"this":[86,122],"purpose,":[87],"prior":[88],"research":[89],"requires":[91],"recovered":[93],"trigger,":[94],"which":[95,111],"hard":[97],"come":[99],"by,":[100],"attempts":[102],"fine-tune":[104],"on":[107,136,170,179,187,204,243,275,298,350],"becomes":[112],"less":[113],"effective":[114,130],"when":[115],"clean":[117,173,207,360],"scarce.":[120],"paper,":[123],"we":[124,194],"present":[125],"simple":[127],"yet":[128],"surprisingly":[129],"technique":[131],"induce":[133,176],"\"selective":[134],"amnesia\"":[135],"backdoored":[138],"model.":[139],"Our":[140,161,232,308],"approach,":[141],"called":[142],"SEAM,":[143],"has":[144],"been":[145],"inspired":[146],"by":[147,199,212,304],"problem":[149],"catastrophic":[151],"forgetting":[152],"(CF),":[153],"long":[155],"standing":[156],"issue":[157],"in":[158,247,259],"continual":[159,218],"learning.":[160],"idea":[162],"retrain":[165],"given":[167],"randomly":[171],"labeled":[172,206],"data,":[174],"CF":[178,242],"leading":[182],"sudden":[185],"forget":[186],"both":[188,276,285],"tasks;":[192],"then":[193],"recover":[195],"task":[198,332],"retraining":[200],"randomized":[202],"correctly":[205],"data.":[208],"We":[209,271],"analyzed":[210],"SEAM":[211,274,312],"modeling":[213],"unlearning":[215,317],"learning":[219],"further":[221,272],"approximating":[222],"using":[225],"Neural":[226],"Tangent":[227],"Kernel":[228],"for":[229,372],"measuring":[230],"CF.":[231],"analysis":[233],"shows":[234],"that":[235,311,334],"our":[236],"random-labeling":[237],"approach":[238],"actually":[239],"maximizes":[240],"unknown":[245],"absence":[249],"triggered":[251],"inputs,":[252],"also":[254],"preserves":[255],"some":[256],"feature":[257],"extraction":[258],"enable":[263],"fast":[265],"revival":[266],"task.":[270],"evaluated":[273],"image":[277,300],"processing":[278],"Natural":[280],"Language":[281],"Processing":[282],"tasks,":[283],"under":[284],"contamination":[287],"manipulation":[290],"attacks,":[291],"over":[292],"thousands":[293],"models":[295],"trained":[297],"popular":[299],"datasets":[301],"provided":[303],"TrojAI":[306,373],"competition.":[307],"experiments":[309],"show":[310],"vastly":[313],"outperforms":[314],"state-of-the-art":[316],"techniques,":[318],"achieving":[319],"high":[321],"Fidelity":[322],"(measuring":[323],"gap":[325],"between":[326],"accuracy":[328],"backdoor)":[337],"efficiently":[338],"(e.g.,":[339,362],"about":[340],"30":[341],"times":[342],"faster":[343],"scratch":[349],"MNIST":[352],"dataset),":[353],"with":[354,363],"only":[355],"small":[357],"amount":[358],"size":[365],"just":[367],"0.1%":[368],"models).":[374]},"counts_by_year":[{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}