{"id":"https://openalex.org/W4417336891","doi":"https://doi.org/10.1109/tdsc.2025.3644371","title":"Trap: Mitigating Poisoning-Based Backdoor Attacks by Treating Poison With Poison","display_name":"Trap: Mitigating Poisoning-Based Backdoor Attacks by Treating Poison With Poison","publication_year":2025,"publication_date":"2025-12-15","ids":{"openalex":"https://openalex.org/W4417336891","doi":"https://doi.org/10.1109/tdsc.2025.3644371"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2025.3644371","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3644371","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Chun Li","orcid":"https://orcid.org/0009-0007-9787-3586"},"institutions":[{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]},{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chun Li","raw_affiliation_strings":["State Key Laboratory for Novel Software Technology, Nanjing University, Nanjing, China","State Key Laboratory for Novel Software Technology and the Software Institute of Nanjing University, China"],"raw_orcid":"https://orcid.org/0009-0007-9787-3586","affiliations":[{"raw_affiliation_string":"State Key Laboratory for Novel Software Technology, Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I881766915"]},{"raw_affiliation_string":"State Key Laboratory for Novel Software Technology and the Software Institute of Nanjing University, China","institution_ids":["https://openalex.org/I4210128818"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zhong Li","orcid":"https://orcid.org/0000-0002-3849-3416"},"institutions":[{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]},{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhong Li","raw_affiliation_strings":["State Key Laboratory for Novel Software Technology, Nanjing University, Nanjing, China","State Key Laboratory for Novel Software Technology and the Software Institute of Nanjing University, China"],"raw_orcid":"https://orcid.org/0000-0002-3849-3416","affiliations":[{"raw_affiliation_string":"State Key Laboratory for Novel Software Technology, Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I881766915"]},{"raw_affiliation_string":"State Key Laboratory for Novel Software Technology and the Software Institute of Nanjing University, China","institution_ids":["https://openalex.org/I4210128818"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002720603","display_name":"Minxue Pan","orcid":"https://orcid.org/0000-0002-4011-5350"},"institutions":[{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]},{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Minxue Pan","raw_affiliation_strings":["State Key Laboratory for Novel Software Technology, Nanjing University, Nanjing, China","State Key Laboratory for Novel Software Technology and the Software Institute of Nanjing University, China"],"raw_orcid":"https://orcid.org/0000-0002-4011-5350","affiliations":[{"raw_affiliation_string":"State Key Laboratory for Novel Software Technology, Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I881766915"]},{"raw_affiliation_string":"State Key Laboratory for Novel Software Technology and the Software Institute of Nanjing University, China","institution_ids":["https://openalex.org/I4210128818"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5090810072","display_name":"Xuandong Li","orcid":"https://orcid.org/0000-0003-3090-9568"},"institutions":[{"id":"https://openalex.org/I36399199","display_name":"Nanjing University of Science and Technology","ror":"https://ror.org/00xp9wg62","country_code":"CN","type":"education","lineage":["https://openalex.org/I36399199"]},{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xuandong Li","raw_affiliation_strings":["State Key Laboratory for Novel Software Technology, Nanjing University, Nanjing, China","State Key Laboratory for Novel Software Technology and the Department of Computer Science and Technology of Nanjing University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Key Laboratory for Novel Software Technology, Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I881766915"]},{"raw_affiliation_string":"State Key Laboratory for Novel Software Technology and the Department of Computer Science and Technology of Nanjing University, China","institution_ids":["https://openalex.org/I36399199"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.20184465,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"2","first_page":"4269","last_page":"4283"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9197999835014343,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9197999835014343,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.00930000003427267,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.008799999952316284,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9980999827384949},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.599399983882904},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4869999885559082},{"id":"https://openalex.org/keywords/retraining","display_name":"Retraining","score":0.40220001339912415},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.3822999894618988},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.3767000138759613}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9980999827384949},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7524999976158142},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.599399983882904},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5390999913215637},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.49889999628067017},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4869999885559082},{"id":"https://openalex.org/C2778712577","wikidata":"https://www.wikidata.org/wiki/Q3505966","display_name":"Retraining","level":2,"score":0.40220001339912415},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4011000096797943},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3822999894618988},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.3767000138759613},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.3425999879837036},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.3357999920845032},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2964000105857849},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.27709999680519104}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3644371","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3644371","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1997081577","display_name":null,"funder_award_id":"2025M781473","funder_id":"https://openalex.org/F4320321543","funder_display_name":"China Postdoctoral Science Foundation"},{"id":"https://openalex.org/G5661312949","display_name":null,"funder_award_id":"BK20241194","funder_id":"https://openalex.org/F4320322769","funder_display_name":"Natural Science Foundation of Jiangsu Province"},{"id":"https://openalex.org/G5734368089","display_name":null,"funder_award_id":"62402214","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7156546712","display_name":null,"funder_award_id":"2025T180420","funder_id":"https://openalex.org/F4320321543","funder_display_name":"China Postdoctoral Science Foundation"},{"id":"https://openalex.org/G8404754680","display_name":null,"funder_award_id":"62372227","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321543","display_name":"China Postdoctoral Science Foundation","ror":"https://ror.org/0426zh255"},{"id":"https://openalex.org/F4320322769","display_name":"Natural Science Foundation of Jiangsu Province","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":46,"referenced_works":["https://openalex.org/W1976383685","https://openalex.org/W2108598243","https://openalex.org/W2117756735","https://openalex.org/W2150593711","https://openalex.org/W2160642098","https://openalex.org/W2194775991","https://openalex.org/W2740924709","https://openalex.org/W2753783305","https://openalex.org/W2905810301","https://openalex.org/W2934843808","https://openalex.org/W2935850529","https://openalex.org/W2942091739","https://openalex.org/W2970335439","https://openalex.org/W2971661634","https://openalex.org/W2981873476","https://openalex.org/W2986013765","https://openalex.org/W2988337058","https://openalex.org/W3010216907","https://openalex.org/W3022746105","https://openalex.org/W3034579202","https://openalex.org/W3042368254","https://openalex.org/W3047375952","https://openalex.org/W3047587361","https://openalex.org/W3094825490","https://openalex.org/W3106646114","https://openalex.org/W3114838227","https://openalex.org/W3170572542","https://openalex.org/W3175215793","https://openalex.org/W3204619801","https://openalex.org/W4214537185","https://openalex.org/W4214680449","https://openalex.org/W4281486913","https://openalex.org/W4292023222","https://openalex.org/W4292829050","https://openalex.org/W4378976916","https://openalex.org/W4386072159","https://openalex.org/W4386076050","https://openalex.org/W4390604544","https://openalex.org/W4390874616","https://openalex.org/W4402227401","https://openalex.org/W4402264320","https://openalex.org/W4402264463","https://openalex.org/W4407466185","https://openalex.org/W4408724354","https://openalex.org/W4413158096","https://openalex.org/W7133236147"],"related_works":[],"abstract_inverted_index":{"The":[0],"backdoor":[1,33,95,126],"attack":[2,59,165],"poses":[3],"a":[4,88,109],"significant":[5],"threat":[6],"to":[7,49,97,113,168],"deep":[8],"neural":[9],"networks.":[10],"Existing":[11],"works":[12],"on":[13,19,27,135,146],"poison":[14],"suppression":[15],"defense":[16],"mainly":[17],"focus":[18],"differentiating":[20],"between":[21],"poisoned":[22,64,115,137],"and":[23,30,45,79,123,149],"benign":[24,71],"samples":[25,65,72,116],"based":[26],"various":[28],"metrics":[29,38],"removing":[31],"the":[32,57,74,81,92,98,118,125,129,133,150,163,173],"using":[34],"Unlearning.":[35],"However,":[36],"these":[37,102],"can":[39],"be":[40],"bypassed":[41],"by":[42,127,176],"certain":[43],"attacks,":[44],"Unlearning":[46],"often":[47],"leads":[48],"sub":[50],"optimal":[51],"model":[52,58,82,134],"performance.":[53],"Through":[54],"examination":[55],"of":[56,77,121,132],"process,":[60],"we":[61,107],"discovered":[62],"that":[63,153],"always":[66],"form":[67],"clusters":[68],"distant":[69],"from":[70],"in":[73,104],"early":[75,119],"stages":[76,120],"training":[78,111,122],"when":[80],"is":[83,87,180],"fully":[84],"trained,":[85],"there":[86],"unique":[89],"pathway":[90],"within":[91],"classifier":[93,130],"connecting":[94],"features":[96],"target":[99],"label.":[100],"Leveraging":[101],"observations,":[103],"this":[105],"paper,":[106],"propose":[108],"novel":[110],"method":[112,142,155],"detect":[114],"during":[117],"remove":[124],"retraining":[128],"part":[131],"relabeled":[136],"samples.":[138],"We":[139,161],"evaluated":[140],"our":[141,154],"against":[143],"twelve":[144],"attacks":[145],"four":[147],"datasets,":[148],"results":[151],"showed":[152],"significantly":[156],"outperforms":[157],"existing":[158],"state-of-the-art":[159],"defenses.":[160],"reduced":[162],"average":[164,174],"success":[166],"rate":[167],"0.07%":[169],"while":[170],"only":[171],"decreasing":[172],"accuracy":[175],"0.33%.":[177],"Our":[178],"code":[179],"available":[181],"at":[182],"https://anonymous.4open.science/r/TRAP-2672.":[183]},"counts_by_year":[],"updated_date":"2026-03-17T06:59:57.516163","created_date":"2025-12-15T00:00:00"}