{"id":"https://openalex.org/W4407168490","doi":"https://doi.org/10.1109/tdsc.2025.3538912","title":"Backdoored Sample Cleansing for Unlabeled Datasets via Bootstrapped Dual Set Purification","display_name":"Backdoored Sample Cleansing for Unlabeled Datasets via Bootstrapped Dual Set Purification","publication_year":2025,"publication_date":"2025-02-05","ids":{"openalex":"https://openalex.org/W4407168490","doi":"https://doi.org/10.1109/tdsc.2025.3538912"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2025.3538912","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3538912","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5047315011","display_name":"Luoyu Chen","orcid":"https://orcid.org/0009-0001-5746-9817"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Luoyu Chen","raw_affiliation_strings":["School of Computer Science, University of Technology Sydney, Ultimo, NSW, Australia","School of Computer Science, University of Technology Sydney, Australia"],"raw_orcid":"https://orcid.org/0009-0001-5746-9817","affiliations":[{"raw_affiliation_string":"School of Computer Science, University of Technology Sydney, Ultimo, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]},{"raw_affiliation_string":"School of Computer Science, University of Technology Sydney, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101907050","display_name":"Weiqi Wang","orcid":"https://orcid.org/0000-0002-7905-3126"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Weiqi Wang","raw_affiliation_strings":["School of Computer Science, University of Technology Sydney, Ultimo, NSW, Australia","School of Computer Science, University of Technology Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0002-7905-3126","affiliations":[{"raw_affiliation_string":"School of Computer Science, University of Technology Sydney, Ultimo, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]},{"raw_affiliation_string":"School of Computer Science, University of Technology Sydney, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059567156","display_name":"Zhiyi Tian","orcid":"https://orcid.org/0000-0001-8905-0941"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Zhiyi Tian","raw_affiliation_strings":["School of Computer Science, University of Technology Sydney, Ultimo, NSW, Australia","School of Computer Science, University of Technology Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0001-8905-0941","affiliations":[{"raw_affiliation_string":"School of Computer Science, University of Technology Sydney, Ultimo, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]},{"raw_affiliation_string":"School of Computer Science, University of Technology Sydney, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061304518","display_name":"Chenhan Zhang","orcid":"https://orcid.org/0000-0002-2352-0485"},"institutions":[{"id":"https://openalex.org/I125068653","display_name":"IE University","ror":"https://ror.org/02jjdwm75","country_code":"ES","type":"education","lineage":["https://openalex.org/I125068653"]},{"id":"https://openalex.org/I99043593","display_name":"Macquarie University","ror":"https://ror.org/01sf06y89","country_code":"AU","type":"education","lineage":["https://openalex.org/I99043593"]}],"countries":["AU","ES"],"is_corresponding":false,"raw_author_name":"Chenhan Zhang","raw_affiliation_strings":["Macquarie University, Sydney, NSW, Australia","Postdoctoral Research FellowMacquarie University"],"raw_orcid":"https://orcid.org/0000-0002-2352-0485","affiliations":[{"raw_affiliation_string":"Macquarie University, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I99043593"]},{"raw_affiliation_string":"Postdoctoral Research FellowMacquarie University","institution_ids":["https://openalex.org/I125068653","https://openalex.org/I99043593"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5005228053","display_name":"Shui Yu","orcid":"https://orcid.org/0000-0003-4485-6743"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shui Yu","raw_affiliation_strings":["School of Computer Science, University of Technology Sydney, Ultimo, NSW, Australia","School of Computer Science, University of Technology Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0003-4485-6743","affiliations":[{"raw_affiliation_string":"School of Computer Science, University of Technology Sydney, Ultimo, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]},{"raw_affiliation_string":"School of Computer Science, University of Technology Sydney, Australia","institution_ids":["https://openalex.org/I114017466"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.00781246,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"22","issue":"4","first_page":"3708","last_page":"3722"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12535","display_name":"Machine Learning and Data Classification","score":0.9524999856948853,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12535","display_name":"Machine Learning and Data Classification","score":0.9524999856948853,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.704552948474884},{"id":"https://openalex.org/keywords/sample","display_name":"Sample (material)","score":0.6396993398666382},{"id":"https://openalex.org/keywords/dual","display_name":"Dual (grammatical number)","score":0.6154890060424805},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5163282752037048},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.4834045469760895},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.434664249420166}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.704552948474884},{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.6396993398666382},{"id":"https://openalex.org/C2780980858","wikidata":"https://www.wikidata.org/wiki/Q110022","display_name":"Dual (grammatical number)","level":2,"score":0.6154890060424805},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5163282752037048},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.4834045469760895},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.434664249420166},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C124952713","wikidata":"https://www.wikidata.org/wiki/Q8242","display_name":"Literature","level":1,"score":0.0},{"id":"https://openalex.org/C43617362","wikidata":"https://www.wikidata.org/wiki/Q170050","display_name":"Chromatography","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3538912","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3538912","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W1987971958","https://openalex.org/W2056610939","https://openalex.org/W2194775991","https://openalex.org/W2250384498","https://openalex.org/W2962858109","https://openalex.org/W2990270730","https://openalex.org/W2996800219","https://openalex.org/W3035524453","https://openalex.org/W3108655343","https://openalex.org/W3171007011","https://openalex.org/W3189812816","https://openalex.org/W4312768002","https://openalex.org/W4313156423","https://openalex.org/W4386065388","https://openalex.org/W4386066154","https://openalex.org/W4386221015","https://openalex.org/W4390874616","https://openalex.org/W4400594365","https://openalex.org/W4404545729","https://openalex.org/W6787972765","https://openalex.org/W6795961950","https://openalex.org/W6839126366","https://openalex.org/W6846009589","https://openalex.org/W6846133217","https://openalex.org/W6850141011"],"related_works":["https://openalex.org/W2317351040","https://openalex.org/W2952466936","https://openalex.org/W1185300216","https://openalex.org/W1988622314","https://openalex.org/W2393949104","https://openalex.org/W4236344264","https://openalex.org/W3046201198","https://openalex.org/W4293061921","https://openalex.org/W2412267837","https://openalex.org/W2041249487"],"abstract_inverted_index":{"Self-Supervised":[0],"Learning":[1],"(<italic":[2,121],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[3,69,110,113,116,119,122],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">SSL</i>)":[4],"excels":[5],"in":[6,153,217],"utilizing":[7],"unlabeled":[8],"data":[9,24,87,96,99,154,209],"for":[10],"feature":[11],"representation":[12],"learning.":[13],"However,":[14,89],"recent":[15],"studies":[16],"have":[17],"revealed":[18],"that":[19],"SSL":[20,34,211],"is":[21,100],"vulnerable":[22],"to":[23,156],"poisoning-based":[25],"backdoor":[26,212],"attacks.":[27],"To":[28,102],"remove":[29],"backdoored":[30,60,126,151],"samples":[31,61,129,152],"from":[32,62,84,127,194],"the":[33,47,63,75,80,85,94,142,148,182,186,190],"training":[35,48,57,81,143],"dataset,":[36],"model":[37,44],"optimization":[38,177],"methods":[39],"often":[40],"fine-tune":[41],"a":[42,51,132,137,158,164],"trained":[43],"by":[45,130,179,185],"contrasting":[46,131],"dataset":[49,78,82,144],"with":[50],"reserved":[52,76,98],"clean":[53,77],"dataset.":[54],"This":[55],"contrastive":[56],"effectively":[58],"marginalizes":[59],"distribution":[64],"of":[65,150],"benign":[66,128],"ones,":[67],"<italic":[68],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">if":[70],"and":[71,79,97,136,163,205],"only":[72],"if</i>":[73],"both":[74],"are":[83],"same":[86],"distribution.":[88],"presuming":[90],"identical":[91],"distributions":[92],"between":[93],"web-scraped":[95],"impractical.":[101],"address":[103],"this":[104],"impractical":[105],"assumption,":[106],"our":[107],"proposed":[108],"Bootstr<bold":[109],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">a</b>pped":[111],"D<bold":[112],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">u</b>al":[114],"Se<bold":[115],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">t</b>":[117],"Purificati<bold":[118],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">o</b>n":[120],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">AUTO</i>)":[123],"method":[124],"distinguishes":[125],"mined":[133,138],"\u2018positive":[134,161],"set\u2019":[135,140,162],"\u2018negative":[139,167],"within":[141,175],"itself.":[145],"We":[146],"exploit":[147],"resistance":[149],"mixing":[155],"mine":[157],"highly":[159],"poisoned":[160,166],"minimally":[165],"set\u2019.":[168],"Besides,":[169],"AUTO":[170],"mitigates":[171],"unstable":[172],"detection":[173,218],"performance":[174,219],"different":[176],"steps":[178],"continuously":[180],"refining":[181],"dual":[183],"sets":[184],"optimized":[187],"model,":[188],"enhancing":[189],"model's":[191],"poison":[192],"distinguishability":[193],"consistently":[195],"improving":[196],"supervision":[197],"signals.":[198],"Our":[199],"extensive":[200],"experiments":[201],"on":[202],"Cifar10,":[203],"Cifar100,":[204],"Imagenet100":[206],"against":[207],"existing":[208,222],"poisoning":[210],"attacks":[213],"demonstrate":[214],"AUTO's":[215],"superiority":[216],"over":[220],"all":[221],"defenses.":[223]},"counts_by_year":[],"updated_date":"2025-12-27T23:08:20.325037","created_date":"2025-02-06T00:00:00"}