{"id":"https://openalex.org/W4410609059","doi":"https://doi.org/10.1109/satml64287.2025.00017","title":"Backdoor Detection Through Replicated Execution of Outsourced Training","display_name":"Backdoor Detection Through Replicated Execution of Outsourced Training","publication_year":2025,"publication_date":"2025-04-09","ids":{"openalex":"https://openalex.org/W4410609059","doi":"https://doi.org/10.1109/satml64287.2025.00017"},"language":"en","primary_location":{"id":"doi:10.1109/satml64287.2025.00017","is_oa":false,"landing_page_url":"https://doi.org/10.1109/satml64287.2025.00017","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE Conference on Secure and Trustworthy Machine Learning (SaTML)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038734135","display_name":"Hengrui Jia","orcid":"https://orcid.org/0000-0002-9483-6647"},"institutions":[{"id":"https://openalex.org/I185261750","display_name":"University of Toronto","ror":"https://ror.org/03dbr7087","country_code":"CA","type":"education","lineage":["https://openalex.org/I185261750"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Hengrui Jia","raw_affiliation_strings":["University of Toronto"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Toronto","institution_ids":["https://openalex.org/I185261750"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5094145958","display_name":"Sierra Wyllie","orcid":"https://orcid.org/0009-0000-1532-8840"},"institutions":[{"id":"https://openalex.org/I185261750","display_name":"University of Toronto","ror":"https://ror.org/03dbr7087","country_code":"CA","type":"education","lineage":["https://openalex.org/I185261750"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Sierra Wyllie","raw_affiliation_strings":["University of Toronto"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Toronto","institution_ids":["https://openalex.org/I185261750"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074645771","display_name":"Akram Bin Sediq","orcid":"https://orcid.org/0000-0003-1260-2853"},"institutions":[{"id":"https://openalex.org/I4210094041","display_name":"Ericsson (Canada)","ror":"https://ror.org/00nas2c56","country_code":"CA","type":"company","lineage":["https://openalex.org/I1306339040","https://openalex.org/I4210094041"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Akram Bin Sediq","raw_affiliation_strings":["Ericsson Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ericsson Canada","institution_ids":["https://openalex.org/I4210094041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055670196","display_name":"Ahmed Ibrahim","orcid":"https://orcid.org/0000-0002-4760-3533"},"institutions":[{"id":"https://openalex.org/I4210094041","display_name":"Ericsson (Canada)","ror":"https://ror.org/00nas2c56","country_code":"CA","type":"company","lineage":["https://openalex.org/I1306339040","https://openalex.org/I4210094041"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Ahmed Ibrahim","raw_affiliation_strings":["Ericsson Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ericsson Canada","institution_ids":["https://openalex.org/I4210094041"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5018809423","display_name":"Nicolas Papernot","orcid":"https://orcid.org/0000-0001-5078-7233"},"institutions":[{"id":"https://openalex.org/I185261750","display_name":"University of Toronto","ror":"https://ror.org/03dbr7087","country_code":"CA","type":"education","lineage":["https://openalex.org/I185261750"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Nicolas Papernot","raw_affiliation_strings":["University of Toronto"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Toronto","institution_ids":["https://openalex.org/I185261750"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.09530583,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"169","last_page":"188"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.8844000101089478,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.8844000101089478,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11902","display_name":"Intelligent Tutoring Systems and Adaptive Learning","score":0.8640999794006348,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10933","display_name":"Real-Time Systems Scheduling","score":0.8561000227928162,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9749816656112671},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7449019551277161},{"id":"https://openalex.org/keywords/training","display_name":"Training (meteorology)","score":0.7020343542098999},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.49039220809936523},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.35387641191482544},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3448053002357483}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9749816656112671},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7449019551277161},{"id":"https://openalex.org/C2777211547","wikidata":"https://www.wikidata.org/wiki/Q17141490","display_name":"Training (meteorology)","level":2,"score":0.7020343542098999},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.49039220809936523},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.35387641191482544},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3448053002357483},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C153294291","wikidata":"https://www.wikidata.org/wiki/Q25261","display_name":"Meteorology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/satml64287.2025.00017","is_oa":false,"landing_page_url":"https://doi.org/10.1109/satml64287.2025.00017","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE Conference on Secure and Trustworthy Machine Learning (SaTML)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306151","display_name":"Alfred P. Sloan Foundation","ror":"https://ror.org/052csg198"},{"id":"https://openalex.org/F4320309949","display_name":"Canadian Institute for Advanced Research","ror":"https://ror.org/01sdtdd95"},{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":49,"referenced_works":["https://openalex.org/W1583975142","https://openalex.org/W2060277733","https://openalex.org/W2067713319","https://openalex.org/W2098843110","https://openalex.org/W2117539524","https://openalex.org/W2282821441","https://openalex.org/W2616028256","https://openalex.org/W2807363941","https://openalex.org/W2896938420","https://openalex.org/W2934843808","https://openalex.org/W2942810103","https://openalex.org/W2962763344","https://openalex.org/W2964882141","https://openalex.org/W3042368254","https://openalex.org/W3048759177","https://openalex.org/W3123486603","https://openalex.org/W3127616799","https://openalex.org/W3154581591","https://openalex.org/W3169839597","https://openalex.org/W3215171287","https://openalex.org/W4312329299","https://openalex.org/W4385679845","https://openalex.org/W4386057740","https://openalex.org/W4396791149","https://openalex.org/W6604335577","https://openalex.org/W6637373629","https://openalex.org/W6685053522","https://openalex.org/W6687483927","https://openalex.org/W6743581629","https://openalex.org/W6746172121","https://openalex.org/W6746897123","https://openalex.org/W6748082217","https://openalex.org/W6750462152","https://openalex.org/W6752600739","https://openalex.org/W6755207826","https://openalex.org/W6756074407","https://openalex.org/W6756333562","https://openalex.org/W6770286897","https://openalex.org/W6779764388","https://openalex.org/W6780640148","https://openalex.org/W6781420246","https://openalex.org/W6789325072","https://openalex.org/W6793958797","https://openalex.org/W6795607857","https://openalex.org/W6797386277","https://openalex.org/W6803329705","https://openalex.org/W6839383656","https://openalex.org/W6839820251","https://openalex.org/W6842893831"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4401407399","https://openalex.org/W2989852175","https://openalex.org/W3015716673","https://openalex.org/W4394050964","https://openalex.org/W4288797976","https://openalex.org/W3132644649","https://openalex.org/W3213133223","https://openalex.org/W2551249631"],"abstract_inverted_index":{"It":[0],"is":[1,144,202,214,234],"common":[2],"practice":[3],"to":[4,12,47,83,97,108,147,155,166,204,236],"outsource":[5],"the":[6,21,30,36,51,62,101,122,138,160,179,193,219],"training":[7,38,92,102],"of":[8,24,60,91,141,162,181,192,208,244],"machine":[9],"learning":[10,188],"models":[11],"cloud":[13,85,164,194],"providers.":[14],"Clients":[15],"who":[16],"do":[17],"so":[18],"gain":[19],"from":[20,35,100,134,239],"cloud's":[22],"economies":[23],"scale,":[25],"but":[26],"implicitly":[27],"assume":[28],"trust:":[29],"server":[31,42],"should":[32],"not":[33],"deviate":[34],"client's":[37],"procedure.":[39],"A":[40],"malicious":[41,119,168],"may,":[43],"for":[44,129],"instance,":[45],"seek":[46],"insert":[48,196],"backdoors":[49],"in":[50,104],"model.":[52],"Detecting":[53],"a":[54,70,79,89,105],"backdoored":[55],"model":[56,126],"without":[57,170],"prior":[58],"knowledge":[59,243],"both":[61],"backdoor":[63],"attack":[64],"and":[65,131],"its":[66,145],"accompanying":[67],"trigger":[68],"remains":[69],"challenging":[71],"problem.":[72],"In":[73,210],"this":[74],"paper,":[75],"we":[76,117,158],"show":[77],"that":[78,149],"client":[80],"with":[81,226],"access":[82],"multiple":[84,95,163],"providers":[86,165,195],"can":[87],"replicate":[88],"subset":[90],"steps":[93],"across":[94],"servers":[96,114,120],"detect":[98],"deviation":[99],"procedure":[103],"similar":[106],"manner":[107],"differential":[109],"testing.":[110],"Assuming":[111],"some":[112],"cloud-provided":[113],"are":[115],"benign,":[116],"identify":[118,167,206],"by":[121,223],"substantial":[123],"difference":[124],"between":[125],"updates":[127,169],"required":[128],"backdooring":[130],"those":[132],"resulting":[133],"clean":[135],"training.":[136],"Perhaps":[137],"strongest":[139],"advantage":[140],"our":[142,182,200,212,232,245],"approach":[143,183,201,213,233],"suitability":[146],"clients":[148],"have":[150],"limited-to-no":[151],"local":[152],"compute":[153],"capability":[154],"perform":[156],"training;":[157],"leverage":[159],"existence":[161],"expensive":[171],"human":[172],"labeling":[173],"or":[174],"heavy":[175],"computation.":[176],"We":[177],"demonstrate":[178],"capabilities":[180],"on":[184],"an":[185,227],"outsourced":[186],"supervised":[187],"task":[189],"where":[190],"50%":[191],"their":[197],"own":[198],"backdoor;":[199],"able":[203],"correctly":[205],"99.6%":[207],"them.":[209],"essence,":[211],"successful":[215],"because":[216],"it":[217],"replaces":[218],"signature-based":[220],"paradigm":[221],"taken":[222],"existing":[224],"approaches":[225],"anomaly-based":[228],"detection":[229,246],"paradigm.":[230],"Furthermore,":[231],"robust":[235],"several":[237],"attacks":[238],"adaptive":[240],"adversaries":[241],"utilizing":[242],"scheme.":[247]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}