{"id":"https://openalex.org/W3201919005","doi":"https://doi.org/10.1145/3472634.3472660","title":"MP-BADNet: A Backdoor-Attack Detection and Identification Protocol among Multi-Participants in Private Deep Neural Networks","display_name":"MP-BADNet: A Backdoor-Attack Detection and Identification Protocol among Multi-Participants in Private Deep Neural Networks","publication_year":2021,"publication_date":"2021-07-30","ids":{"openalex":"https://openalex.org/W3201919005","doi":"https://doi.org/10.1145/3472634.3472660","mag":"3201919005"},"language":"en","primary_location":{"id":"doi:10.1145/3472634.3472660","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3472634.3472660","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Turing Award Celebration Conference - China ( ACM TURC 2021)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100604556","display_name":"Congcong Chen","orcid":"https://orcid.org/0000-0002-1716-1332"},"institutions":[{"id":"https://openalex.org/I44675526","display_name":"Shanghai Ocean University","ror":"https://ror.org/04n40zv07","country_code":"CN","type":"education","lineage":["https://openalex.org/I44675526"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Congcong Chen","raw_affiliation_strings":["Shanghai Ocean University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Ocean University, China","institution_ids":["https://openalex.org/I44675526"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084718593","display_name":"Lifei Wei","orcid":"https://orcid.org/0000-0002-0243-9995"},"institutions":[{"id":"https://openalex.org/I44675526","display_name":"Shanghai Ocean University","ror":"https://ror.org/04n40zv07","country_code":"CN","type":"education","lineage":["https://openalex.org/I44675526"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lifei Wei","raw_affiliation_strings":["Shanghai Ocean University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Ocean University, China","institution_ids":["https://openalex.org/I44675526"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037608200","display_name":"Lei Zhang","orcid":"https://orcid.org/0000-0002-9702-6738"},"institutions":[{"id":"https://openalex.org/I44675526","display_name":"Shanghai Ocean University","ror":"https://ror.org/04n40zv07","country_code":"CN","type":"education","lineage":["https://openalex.org/I44675526"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lei Zhang","raw_affiliation_strings":["Shanghai Ocean University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Ocean University, China","institution_ids":["https://openalex.org/I44675526"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5081596329","display_name":"Jianting Ning","orcid":"https://orcid.org/0000-0001-7165-398X"},"institutions":[{"id":"https://openalex.org/I111753288","display_name":"Fujian Normal University","ror":"https://ror.org/020azk594","country_code":"CN","type":"education","lineage":["https://openalex.org/I111753288"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianting Ning","raw_affiliation_strings":["Fujian Normal University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fujian Normal University, China","institution_ids":["https://openalex.org/I111753288"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"104","last_page":"109"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9923769235610962},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.788551390171051},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.7106716632843018},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5890458822250366},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.5803859829902649},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.5520685315132141},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5461361408233643},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.5268065929412842},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.454780250787735},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4099195897579193},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3338543772697449}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9923769235610962},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.788551390171051},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.7106716632843018},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5890458822250366},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.5803859829902649},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.5520685315132141},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5461361408233643},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.5268065929412842},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.454780250787735},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4099195897579193},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3338543772697449},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3472634.3472660","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3472634.3472660","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Turing Award Celebration Conference - China ( ACM TURC 2021)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7099999785423279}],"awards":[{"id":"https://openalex.org/G2943611540","display_name":null,"funder_award_id":"61972241, 61802248, 61972094","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8739662057","display_name":null,"funder_award_id":"18ZR1417300","funder_id":"https://openalex.org/F4320309612","funder_display_name":"Natural Science Foundation of Shanghai"}],"funders":[{"id":"https://openalex.org/F4320309612","display_name":"Natural Science Foundation of Shanghai","ror":null},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W1969009977","https://openalex.org/W1989898472","https://openalex.org/W1999404243","https://openalex.org/W2088492763","https://openalex.org/W2095577883","https://openalex.org/W2753783305","https://openalex.org/W2759483166","https://openalex.org/W2942091739","https://openalex.org/W2963752132","https://openalex.org/W2986013765","https://openalex.org/W3108146280","https://openalex.org/W3125817276"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4386080799","https://openalex.org/W3140988292","https://openalex.org/W4317672133","https://openalex.org/W4328053081"],"abstract_inverted_index":{"Deep":[0],"Neural":[1],"Networks":[2],"(DNNs)":[3],"are":[4],"vulnerable":[5],"to":[6,47,55,85],"backdoor":[7,108,163],"attacks":[8,23,164],"where":[9],"the":[10,17,28,43,57,60,69,73,78,87,103,107,130,143,156,166],"adversary":[11],"can":[12,122,158],"inject":[13],"malicious":[14],"data":[15,70,75,92,141],"during":[16,77],"DNN":[18,44,61,132,168],"training.":[19],"Such":[20],"kind":[21],"of":[22,42,50,90,139],"is":[24,30,53,82],"always":[25],"activated":[26],"when":[27],"input":[29,91,140],"stamped":[31],"with":[32],"a":[33,39,100],"pre-specified":[34],"trigger":[35],"which":[36],"results":[37,153],"in":[38,116,129,145,165],"pre-setting":[40],"prediction":[41],"model.":[45,169],"Due":[46],"increasing":[48],"applications":[49],"DNNs,":[51],"it":[52,81],"necessary":[54],"detect":[56,125,160],"backdoors":[58,128],"whether":[59],"model":[62,79,144],"has":[63],"been":[64],"trojaned":[65],"before":[66],"implementation.":[67],"Since":[68],"come":[71],"from":[72],"various":[74],"holders":[76],"training,":[80],"also":[83,135],"important":[84],"protect":[86],"privacy":[88,137],"both":[89],"and":[93,111,126,142,161],"models.":[94],"In":[95],"this":[96],"paper,":[97],"we":[98],"propose":[99],"framework":[101],"MP-BADNet,":[102],"first":[104],"work":[105],"on":[106],"attack":[109],"detection":[110],"identification":[112],"protocol":[113],"among":[114],"multi-participants":[115],"private":[117],"deep":[118],"neural":[119],"networks.":[120],"MP-BADNet":[121],"not":[123],"only":[124],"identify":[127,162],"privacy-preserving":[131,167],"model,":[133],"but":[134],"achieve":[136],"preserving":[138],"secure":[146],"multi-party":[147],"computation":[148],"(MPC)":[149],"ways.":[150],"The":[151],"implemental":[152],"show":[154],"that":[155],"scheme":[157],"effectively":[159]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2022,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}
