{"id":"https://openalex.org/W4403021927","doi":"https://doi.org/10.1109/tdsc.2024.3472117","title":"Artemis: Defending Against Backdoor Attacks via Distribution Shift","display_name":"Artemis: Defending Against Backdoor Attacks via Distribution Shift","publication_year":2024,"publication_date":"2024-10-01","ids":{"openalex":"https://openalex.org/W4403021927","doi":"https://doi.org/10.1109/tdsc.2024.3472117"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2024.3472117","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2024.3472117","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Meng Xue","orcid":"https://orcid.org/0009-0002-6580-7940"},"institutions":[{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Meng Xue","raw_affiliation_strings":["Hong Kong University of Science and Technology, Hong Kong","Hong Kong University of Science and Technology, China"],"raw_orcid":"https://orcid.org/0009-0002-6580-7940","affiliations":[{"raw_affiliation_string":"Hong Kong University of Science and Technology, Hong Kong","institution_ids":["https://openalex.org/I200769079"]},{"raw_affiliation_string":"Hong Kong University of Science and Technology, China","institution_ids":["https://openalex.org/I200769079"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102915614","display_name":"Zhixian Wang","orcid":"https://orcid.org/0009-0007-1519-9314"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhixian Wang","raw_affiliation_strings":["Wuhan University, Wuhan, China","Wuhan University, China"],"raw_orcid":"https://orcid.org/0009-0007-1519-9314","affiliations":[{"raw_affiliation_string":"Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]},{"raw_affiliation_string":"Wuhan University, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Qian Zhang","orcid":"https://orcid.org/0000-0001-9205-1881"},"institutions":[{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Qian Zhang","raw_affiliation_strings":["Hong Kong University of Science and Technology, Hong Kong","Hong Kong University of Science and Technology, China"],"raw_orcid":"https://orcid.org/0000-0001-9205-1881","affiliations":[{"raw_affiliation_string":"Hong Kong University of Science and Technology, Hong Kong","institution_ids":["https://openalex.org/I200769079"]},{"raw_affiliation_string":"Hong Kong University of Science and Technology, China","institution_ids":["https://openalex.org/I200769079"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046712504","display_name":"Xueluan Gong","orcid":"https://orcid.org/0000-0003-2190-8117"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xueluan Gong","raw_affiliation_strings":["Wuhan University, Wuhan, China","Wuhan University, China"],"raw_orcid":"https://orcid.org/0000-0003-2190-8117","affiliations":[{"raw_affiliation_string":"Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]},{"raw_affiliation_string":"Wuhan University, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111348766","display_name":"Zhihang Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhihang Liu","raw_affiliation_strings":["Wuhan University, Wuhan, China","Wuhan University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]},{"raw_affiliation_string":"Wuhan University, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5015275781","display_name":"Yanjiao Chen","orcid":"https://orcid.org/0000-0002-1382-0679"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yanjiao Chen","raw_affiliation_strings":["College of Electrical Engineering, Zhejiang University, Hangzhou, China","College of Electrical Engineering, Zhejiang University, China"],"raw_orcid":"https://orcid.org/0000-0002-1382-0679","affiliations":[{"raw_affiliation_string":"College of Electrical Engineering, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]},{"raw_affiliation_string":"College of Electrical Engineering, Zhejiang University, China","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.5682,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.68461103,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":"22","issue":"2","first_page":"1781","last_page":"1795"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9829000234603882,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9829000234603882,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9794999957084656,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9728000164031982,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9493726491928101},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.673194169998169},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5925098061561584},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.358642578125}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9493726491928101},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.673194169998169},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5925098061561584},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.358642578125}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tdsc.2024.3472117","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2024.3472117","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},{"id":"pmh:oai:repository.hkust.edu.hk:1783.1-147303","is_oa":false,"landing_page_url":"http://repository.hkust.edu.hk/ir/Record/1783.1-147303","pdf_url":null,"source":{"id":"https://openalex.org/S4306401796","display_name":"Rare & Special e-Zone (The Hong Kong University of Science and Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I200769079","host_organization_name":"Hong Kong University of Science and Technology","host_organization_lineage":["https://openalex.org/I200769079"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":50,"referenced_works":["https://openalex.org/W2067713319","https://openalex.org/W2108598243","https://openalex.org/W2115403315","https://openalex.org/W2165698076","https://openalex.org/W2302255633","https://openalex.org/W2475287302","https://openalex.org/W2535873859","https://openalex.org/W2753783305","https://openalex.org/W2784499877","https://openalex.org/W2807363941","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W2963037989","https://openalex.org/W2963446712","https://openalex.org/W2970335439","https://openalex.org/W2982083293","https://openalex.org/W2986013765","https://openalex.org/W3010216907","https://openalex.org/W3152758407","https://openalex.org/W3175481246","https://openalex.org/W3176602994","https://openalex.org/W4214537185","https://openalex.org/W4214680449","https://openalex.org/W4226313456","https://openalex.org/W4312329299","https://openalex.org/W4312592225","https://openalex.org/W4313029666","https://openalex.org/W4313192591","https://openalex.org/W4317796293","https://openalex.org/W4324007135","https://openalex.org/W4380763515","https://openalex.org/W4385187298","https://openalex.org/W6602722444","https://openalex.org/W6637373629","https://openalex.org/W6704559304","https://openalex.org/W6746897123","https://openalex.org/W6756074407","https://openalex.org/W6756333562","https://openalex.org/W6761139768","https://openalex.org/W6762718338","https://openalex.org/W6766336336","https://openalex.org/W6771747359","https://openalex.org/W6779395778","https://openalex.org/W6784558051","https://openalex.org/W6787972765","https://openalex.org/W6788876066","https://openalex.org/W6789325072","https://openalex.org/W6803329306","https://openalex.org/W6809890637","https://openalex.org/W6839383656"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4386080799","https://openalex.org/W4401407399"],"abstract_inverted_index":{"Backdoor":[0],"attacks":[1,52,152,180],"can":[2,19,53,171],"exploit":[3],"vulnerabilities":[4],"in":[5,46,87,109],"the":[6,32,80,88,100,105,122,127,132,191],"training":[7],"process":[8],"of":[9,34,107,124],"Deep":[10],"Neural":[11],"Networks":[12],"(DNNs),":[13],"introducing":[14],"hidden":[15],"malicious":[16],"functionality":[17],"that":[18,165],"be":[20],"activated":[21],"by":[22,185],"a":[23,35,65,186],"specific":[24],"input":[25],"pattern.":[26],"Existing":[27],"defenses":[28,184],"typically":[29],"rely":[30],"on":[31,153],"assumption":[33],"significant":[36,187],"difference":[37],"between":[38,82,126],"poisoned":[39,83],"and":[40,48,84,131,160,175,181],"clean":[41],"samples.":[42],"However,":[43],"subtle":[44],"differences":[45],"dynamic":[47,174],"low":[49,176],"poisoning":[50,55,177],"ratio":[51,178],"conceal":[54],"features,":[56],"thereby":[57],"evading":[58],"defenses.":[59],"In":[60],"this":[61],"work,":[62],"we":[63,111],"propose":[64],"novel":[66],"backdoor":[67,179],"defense":[68],"approach":[69],"called":[70],"<sc":[71,92,117,168],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[72,93,118,169,195],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Artemis</small>,":[73,170],"which":[74],"utilizes":[75],"distribution":[76],"shifts":[77],"to":[78,120,156],"eliminate":[79],"discrepancy":[81],"benign":[85],"samples":[86],"feature":[89],"space.":[90],"Additionally,":[91],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Artemis</small>":[94,119],"learns":[95],"from":[96],"domain-invariant":[97],"features":[98,125],"after":[99],"shift.":[101],"To":[102],"further":[103],"enhance":[104],"purification":[106],"backdoors":[108],"DNNs,":[110],"incorporate":[112],"soft":[113],"knowledge":[114],"distillation":[115],"into":[116],"guide":[121],"alignment":[123],"source":[128],"dataset":[129,135],"domain":[130],"generated":[133],"distribution-shift":[134],"domain.":[136],"We":[137,189],"extensively":[138],"compare":[139],"our":[140,166],"proposed":[141],"method":[142],"with":[143],"5":[144],"state-of-the-art":[145],"(SOTA)":[146],"defensive":[147],"techniques":[148],"under":[149],"9":[150],"SOTA":[151],"4":[154],"datasets":[155],"demonstrate":[157],"its":[158],"effectiveness":[159],"robustness.":[161],"Our":[162],"results":[163],"show":[164],"method,":[167],"successfully":[172],"purify":[173],"outperform":[182],"existing":[183],"margin.":[188],"release":[190],"code":[192],"at":[193],"<uri":[194],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">https://github.com/xmyun/Artemis</uri>.":[196]},"counts_by_year":[{"year":2025,"cited_by_count":2}],"updated_date":"2025-12-27T23:08:20.325037","created_date":"2025-10-10T00:00:00"}