{"id":"https://openalex.org/W4392173846","doi":"https://doi.org/10.1109/tdsc.2024.3369751","title":"Reverse Backdoor Distillation: Towards Online Backdoor Attack Detection for Deep Neural Network Models","display_name":"Reverse Backdoor Distillation: Towards Online Backdoor Attack Detection for Deep Neural Network Models","publication_year":2024,"publication_date":"2024-02-26","ids":{"openalex":"https://openalex.org/W4392173846","doi":"https://doi.org/10.1109/tdsc.2024.3369751"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2024.3369751","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2024.3369751","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://figshare.com/articles/journal_contribution/Reverse_Backdoor_Distillation_Towards_Online_Backdoor_Attack_Detection_for_Deep_Neural_Network_Models/27824055","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5057610131","display_name":"Zeming Yao","orcid":"https://orcid.org/0000-0001-7223-0655"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Zeming Yao","raw_affiliation_strings":["Swinburne University of Technology, Melbourne, VIC, Australia","School of Science, Computing and Engineering Technologies, Swinburne University of Technology, Australia"],"raw_orcid":"https://orcid.org/0000-0001-7223-0655","affiliations":[{"raw_affiliation_string":"Swinburne University of Technology, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]},{"raw_affiliation_string":"School of Science, Computing and Engineering Technologies, Swinburne University of Technology, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036365195","display_name":"Hangtao Zhang","orcid":"https://orcid.org/0000-0002-6805-6401"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hangtao Zhang","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-6805-6401","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101081602","display_name":"Yicheng Guo","orcid":"https://orcid.org/0009-0002-7238-8254"},"institutions":[{"id":"https://openalex.org/I2250955327","display_name":"Huawei Technologies (China)","ror":"https://ror.org/00cmhce21","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250955327"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yicheng Guo","raw_affiliation_strings":["IT Innovation and Research Center, Huawei, Shenzhen, China","AI application reserach center, Huawei Technologies Co Ltd, China"],"raw_orcid":"https://orcid.org/0009-0002-7238-8254","affiliations":[{"raw_affiliation_string":"IT Innovation and Research Center, Huawei, Shenzhen, China","institution_ids":["https://openalex.org/I2250955327"]},{"raw_affiliation_string":"AI application reserach center, Huawei Technologies Co Ltd, China","institution_ids":["https://openalex.org/I2250955327"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101574189","display_name":"Xin Tian","orcid":"https://orcid.org/0000-0002-4876-5147"},"institutions":[{"id":"https://openalex.org/I2250955327","display_name":"Huawei Technologies (China)","ror":"https://ror.org/00cmhce21","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250955327"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xin Tian","raw_affiliation_strings":["IT Innovation and Research Center, Huawei, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-4876-5147","affiliations":[{"raw_affiliation_string":"IT Innovation and Research Center, Huawei, Shenzhen, China","institution_ids":["https://openalex.org/I2250955327"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101440710","display_name":"Wei Peng","orcid":"https://orcid.org/0000-0002-0868-0974"},"institutions":[{"id":"https://openalex.org/I2250955327","display_name":"Huawei Technologies (China)","ror":"https://ror.org/00cmhce21","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250955327"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Peng","raw_affiliation_strings":["IT Innovation and Research Center, Huawei, Shenzhen, China","AI application reserach center, Huawei Technologies Co Ltd, China"],"raw_orcid":"https://orcid.org/0000-0002-0868-0974","affiliations":[{"raw_affiliation_string":"IT Innovation and Research Center, Huawei, Shenzhen, China","institution_ids":["https://openalex.org/I2250955327"]},{"raw_affiliation_string":"AI application reserach center, Huawei Technologies Co Ltd, China","institution_ids":["https://openalex.org/I2250955327"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100458990","display_name":"Yi Zou","orcid":"https://orcid.org/0000-0002-4382-4670"},"institutions":[{"id":"https://openalex.org/I90610280","display_name":"South China University of Technology","ror":"https://ror.org/0530pts50","country_code":"CN","type":"education","lineage":["https://openalex.org/I90610280"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yi Zou","raw_affiliation_strings":["South China University of China, Guangzhou, China","School of Microelectronics, South China University of Technology, China"],"raw_orcid":"https://orcid.org/0000-0002-4382-4670","affiliations":[{"raw_affiliation_string":"South China University of China, Guangzhou, China","institution_ids":["https://openalex.org/I90610280"]},{"raw_affiliation_string":"School of Microelectronics, South China University of Technology, China","institution_ids":["https://openalex.org/I90610280"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015011245","display_name":"Leo Yu Zhang","orcid":"https://orcid.org/0000-0001-9330-2662"},"institutions":[{"id":"https://openalex.org/I11701301","display_name":"Griffith University","ror":"https://ror.org/02sc3r913","country_code":"AU","type":"education","lineage":["https://openalex.org/I11701301"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Leo Yu Zhang","raw_affiliation_strings":["Griffith University, Brisbane, QLD, Australia","School of Information and Communication Technology, Griffith University, Australia"],"raw_orcid":"https://orcid.org/0000-0001-9330-2662","affiliations":[{"raw_affiliation_string":"Griffith University, Brisbane, QLD, Australia","institution_ids":["https://openalex.org/I11701301"]},{"raw_affiliation_string":"School of Information and Communication Technology, Griffith University, Australia","institution_ids":["https://openalex.org/I11701301"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5114860210","display_name":"Chao Chen","orcid":"https://orcid.org/0000-0003-1355-3870"},"institutions":[{"id":"https://openalex.org/I1320473756","display_name":"The Royal Melbourne Hospital","ror":"https://ror.org/005bvs909","country_code":"AU","type":"funder","lineage":["https://openalex.org/I1320473756","https://openalex.org/I4210158168"]},{"id":"https://openalex.org/I82951845","display_name":"RMIT University","ror":"https://ror.org/04ttjf776","country_code":"AU","type":"education","lineage":["https://openalex.org/I82951845"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Chao Chen","raw_affiliation_strings":["Royal Melbourne Institute of Technology, Melbourne, VIC, Australia","Department of Information System and Business Analytics, RMIT Universitym, Australia"],"raw_orcid":"https://orcid.org/0000-0003-1355-3870","affiliations":[{"raw_affiliation_string":"Royal Melbourne Institute of Technology, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I1320473756"]},{"raw_affiliation_string":"Department of Information System and Business Analytics, RMIT Universitym, Australia","institution_ids":["https://openalex.org/I82951845"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.1215,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.92022601,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"21","issue":"6","first_page":"5098","last_page":"5111"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9950000047683716,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9950000047683716,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9896000027656555,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9894000291824341,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.993955135345459},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7146821022033691},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.6199342608451843},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.511763334274292},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.47844198346138}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.993955135345459},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7146821022033691},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.6199342608451843},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.511763334274292},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.47844198346138}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/tdsc.2024.3369751","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2024.3369751","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},{"id":"pmh:oai:figshare.com:article/27824055","is_oa":true,"landing_page_url":"https://figshare.com/articles/journal_contribution/Reverse_Backdoor_Distillation_Towards_Online_Backdoor_Attack_Detection_for_Deep_Neural_Network_Models/27824055","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Text"},{"id":"pmh:oai:research-repository.griffith.edu.au:10072/430525","is_oa":false,"landing_page_url":"https://hdl.handle.net/10072/430525","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Journal article"}],"best_oa_location":{"id":"pmh:oai:figshare.com:article/27824055","is_oa":true,"landing_page_url":"https://figshare.com/articles/journal_contribution/Reverse_Backdoor_Distillation_Towards_Online_Backdoor_Attack_Detection_for_Deep_Neural_Network_Models/27824055","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":57,"referenced_works":["https://openalex.org/W2107397716","https://openalex.org/W2112796928","https://openalex.org/W2143612262","https://openalex.org/W2194775991","https://openalex.org/W2748789698","https://openalex.org/W2753783305","https://openalex.org/W2774423163","https://openalex.org/W2788820894","https://openalex.org/W2807363941","https://openalex.org/W2934843808","https://openalex.org/W2935384092","https://openalex.org/W2962858109","https://openalex.org/W2966104011","https://openalex.org/W2971661634","https://openalex.org/W2985913519","https://openalex.org/W2986013765","https://openalex.org/W2990270730","https://openalex.org/W2999321020","https://openalex.org/W3016970897","https://openalex.org/W3098772125","https://openalex.org/W3103934428","https://openalex.org/W3112001526","https://openalex.org/W3152758407","https://openalex.org/W3173757585","https://openalex.org/W3189812816","https://openalex.org/W3210377054","https://openalex.org/W3213515577","https://openalex.org/W3217539178","https://openalex.org/W4200512086","https://openalex.org/W4214537185","https://openalex.org/W4214563788","https://openalex.org/W4214680449","https://openalex.org/W4246193833","https://openalex.org/W4283753393","https://openalex.org/W4288057740","https://openalex.org/W4304099366","https://openalex.org/W4312569687","https://openalex.org/W4385412309","https://openalex.org/W4390874277","https://openalex.org/W4402264250","https://openalex.org/W6637373629","https://openalex.org/W6681673350","https://openalex.org/W6684191040","https://openalex.org/W6743581629","https://openalex.org/W6746897123","https://openalex.org/W6748982675","https://openalex.org/W6750462152","https://openalex.org/W6756074407","https://openalex.org/W6756333562","https://openalex.org/W6761473192","https://openalex.org/W6766336336","https://openalex.org/W6772561156","https://openalex.org/W6784558051","https://openalex.org/W6805016613","https://openalex.org/W6809905531","https://openalex.org/W6838899697","https://openalex.org/W6854676530"],"related_works":["https://openalex.org/W2748952813","https://openalex.org/W4320031223","https://openalex.org/W3015678314","https://openalex.org/W4281902577","https://openalex.org/W4200629851","https://openalex.org/W3009072493","https://openalex.org/W4386185023","https://openalex.org/W4317672133","https://openalex.org/W3140988292","https://openalex.org/W4386080799"],"abstract_inverted_index":{"The":[0],"backdoor":[1,68,82,95,100,112,132,160],"attack":[2,133],"on":[3,166],"deep":[4],"neural":[5],"network":[6],"models":[7,33],"implants":[8],"malicious":[9],"data":[10,119,127],"patterns":[11],"in":[12,29,107,155,183,192],"a":[13,65,98,137,142,159,210],"model":[14,139,154,174],"to":[15,55,74,140,157],"induce":[16],"attacker-desirable":[17],"behaviors.":[18],"Existing":[19],"defense":[20],"methods":[21,198],"fall":[22],"into":[23],"the":[24,31,53,87,115,152,201],"online":[25,50,67,111,149,181],"and":[26,80,176],"offline":[27,32],"categories,":[28],"which":[30,145],"achieve":[34],"state-of-the-art":[35],"detection":[36,69,101],"rates":[37],"but":[38],"are":[39],"restricted":[40],"by":[41],"heavy":[42],"computation":[43],"overhead.":[44],"In":[45],"contrast,":[46],"their":[47],"more":[48],"deployable":[49],"counterparts":[51],"lack":[52],"means":[54],"detect":[56],"source-specific":[57,79,194],"backdoors":[58],"with":[59,78,86,109,151,172],"large":[60],"sizes.":[61],"This":[62],"work":[63],"proposes":[64],"new":[66],"method\u2014Reverse":[70],"Backdoor":[71],"Distillation":[72],"(RBD)":[73],"handle":[75],"issues":[76],"associated":[77],"source-agnostic":[81],"attacks.":[83],"RBD,":[84],"designed":[85],"novel":[88],"perspective":[89],"of":[90,93,203,213],"distilling":[91],"instead":[92],"erasing":[94],"knowledge,":[96],"is":[97,146],"complementary":[99],"methodology":[102],"that":[103,117],"can":[104],"be":[105],"used":[106],"conjunction":[108],"other":[110],"defenses.":[113],"Considering":[114],"fact":[116],"trigger":[118,177],"will":[120,128],"cause":[121],"overwhelming":[122],"neuron":[123],"activation":[124],"while":[125],"clean":[126],"not,":[129],"RBD":[130,165,179,188,208],"distills":[131],"pattern":[134],"knowledge":[135],"from":[136],"suspicious":[138],"create":[141],"shadow":[143],"model,":[144],"subsequently":[147],"deployed":[148],"along":[150],"original":[153],"scope":[156],"predict":[158],"attack.":[161],"We":[162],"extensively":[163],"evaluate":[164],"several":[167],"datasets":[168],"(MNIST,":[169],"GTSRB,":[170],"CIFAR-10)":[171],"diverse":[173],"architectures":[175],"patterns.":[178],"outperforms":[180],"benchmarks":[182],"all":[184],"experimental":[185],"settings.":[186],"Notably,":[187],"demonstrates":[189],"superior":[190],"capability":[191],"detecting":[193],"attacks,":[195],"where":[196],"comparison":[197],"fail,":[199],"underscoring":[200],"effectiveness":[202],"our":[204],"proposed":[205],"technique.":[206],"Moreover,":[207],"achieves":[209],"computational":[211],"savings":[212],"at":[214],"least":[215],"97%.":[216]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":2}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}