{"id":"https://openalex.org/W4405183017","doi":"https://doi.org/10.1145/3658644.3670361","title":"Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defense","display_name":"Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defense","publication_year":2024,"publication_date":"2024-12-02","ids":{"openalex":"https://openalex.org/W4405183017","doi":"https://doi.org/10.1145/3658644.3670361"},"language":"en","primary_location":{"id":"doi:10.1145/3658644.3670361","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3670361","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3670361","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3670361","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5070922232","display_name":"Hua Ma","orcid":"https://orcid.org/0000-0001-7132-9258"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Hua Ma","raw_affiliation_strings":["CSIRO's Data61, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0001-7132-9258","affiliations":[{"raw_affiliation_string":"CSIRO's Data61, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102805627","display_name":"Shang Wang","orcid":"https://orcid.org/0000-0002-5114-4659"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shang Wang","raw_affiliation_strings":["University of Technology Sydney, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0002-5114-4659","affiliations":[{"raw_affiliation_string":"University of Technology Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067969908","display_name":"Yansong Gao","orcid":"https://orcid.org/0000-0001-6029-5064"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yansong Gao","raw_affiliation_strings":["CSIRO's Data61, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0001-6029-5064","affiliations":[{"raw_affiliation_string":"CSIRO's Data61, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100410688","display_name":"Zhi Zhang","orcid":"https://orcid.org/0000-0002-1496-7293"},"institutions":[{"id":"https://openalex.org/I177877127","display_name":"The University of Western Australia","ror":"https://ror.org/047272k79","country_code":"AU","type":"education","lineage":["https://openalex.org/I177877127"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Zhi Zhang","raw_affiliation_strings":["The University of Western Australia, Perth, WA, Australia"],"raw_orcid":"https://orcid.org/0000-0002-1496-7293","affiliations":[{"raw_affiliation_string":"The University of Western Australia, Perth, WA, Australia","institution_ids":["https://openalex.org/I177877127"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039324800","display_name":"Huming Qiu","orcid":"https://orcid.org/0009-0004-5385-9414"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Huming Qiu","raw_affiliation_strings":["Fudan University, ShangHai, China"],"raw_orcid":"https://orcid.org/0009-0004-5385-9414","affiliations":[{"raw_affiliation_string":"Fudan University, ShangHai, China","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009850797","display_name":"Minhui Xue","orcid":"https://orcid.org/0000-0002-9172-4252"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Minhui Xue","raw_affiliation_strings":["CSIRO's Data61, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0002-9172-4252","affiliations":[{"raw_affiliation_string":"CSIRO's Data61, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086357020","display_name":"Alsharif Abuadbba","orcid":"https://orcid.org/0000-0001-9695-7947"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Alsharif Abuadbba","raw_affiliation_strings":["CSIRO's Data61, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0001-9695-7947","affiliations":[{"raw_affiliation_string":"CSIRO's Data61, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048592388","display_name":"Anmin Fu","orcid":"https://orcid.org/0000-0002-1632-5737"},"institutions":[{"id":"https://openalex.org/I36399199","display_name":"Nanjing University of Science and Technology","ror":"https://ror.org/00xp9wg62","country_code":"CN","type":"education","lineage":["https://openalex.org/I36399199"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Anmin Fu","raw_affiliation_strings":["Nanjing University of Science and Technology, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-1632-5737","affiliations":[{"raw_affiliation_string":"Nanjing University of Science and Technology, Nanjing, China","institution_ids":["https://openalex.org/I36399199"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082256444","display_name":"\u202aSurya Nepal\u202c","orcid":"https://orcid.org/0000-0002-3289-6599"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Surya Nepal","raw_affiliation_strings":["CSIRO's Data61, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0002-3289-6599","affiliations":[{"raw_affiliation_string":"CSIRO's Data61, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5040978000","display_name":"Derek Abbott","orcid":"https://orcid.org/0000-0002-0945-2674"},"institutions":[{"id":"https://openalex.org/I5681781","display_name":"The University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Derek Abbott","raw_affiliation_strings":["The University of Adelaide, Adelaide, Australia"],"raw_orcid":"https://orcid.org/0000-0002-0945-2674","affiliations":[{"raw_affiliation_string":"The University of Adelaide, Adelaide, Australia","institution_ids":["https://openalex.org/I5681781"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"4465","last_page":"4479"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9621000289916992,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9621000289916992,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9595456123352051},{"id":"https://openalex.org/keywords/simple","display_name":"Simple (philosophy)","score":0.7754738330841064},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.676413893699646},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5624189376831055},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3577932119369507},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2778826951980591}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9595456123352051},{"id":"https://openalex.org/C2780586882","wikidata":"https://www.wikidata.org/wiki/Q7520643","display_name":"Simple (philosophy)","level":2,"score":0.7754738330841064},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.676413893699646},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5624189376831055},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3577932119369507},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2778826951980591},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3658644.3670361","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3670361","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3670361","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},{"id":"pmh:oai:pure.atira.dk:publications/a4460219-2128-4578-be7c-07068f109685","is_oa":false,"landing_page_url":"https://research-repository.uwa.edu.au/en/publications/a4460219-2128-4578-be7c-07068f109685","pdf_url":null,"source":{"id":"https://openalex.org/S4306402492","display_name":"UWA Profiles and Research Repository (UWA)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I177877127","host_organization_name":"The University of Western Australia","host_organization_lineage":["https://openalex.org/I177877127"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Ma, H, Wang, S, Gao, Y, Zhang, Z, Qiu, H, Xue, M, Abuadbba, A, Fu, A, Nepal, S & Abbott, D 2024, Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defense. in Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security. CCS 2024 - Proceedings of the 2024 ACM SIGSAC Conference on Computer and Communications Security, Association for Computing Machinery (ACM), pp. 4465-4479, 2024 ACM SIGSAC Conference on Computer and Communications Security, Salt Lake City, United States, 14/10/24. https://doi.org/10.1145/3658644.3670361","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"doi:10.1145/3658644.3670361","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3670361","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3670361","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/13","display_name":"Climate action","score":0.4300000071525574}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320320386","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4405183017.pdf","grobid_xml":"https://content.openalex.org/works/W4405183017.grobid-xml"},"referenced_works_count":42,"referenced_works":["https://openalex.org/W1834627138","https://openalex.org/W2067713319","https://openalex.org/W2112796928","https://openalex.org/W2194775991","https://openalex.org/W2325939864","https://openalex.org/W2350778671","https://openalex.org/W2794825826","https://openalex.org/W2796004214","https://openalex.org/W2807363941","https://openalex.org/W2963946669","https://openalex.org/W2966689772","https://openalex.org/W2985913519","https://openalex.org/W2986013765","https://openalex.org/W2990270730","https://openalex.org/W2996800219","https://openalex.org/W3034258347","https://openalex.org/W3043789969","https://openalex.org/W3083185154","https://openalex.org/W3093239278","https://openalex.org/W3102785203","https://openalex.org/W3106646114","https://openalex.org/W3107337211","https://openalex.org/W3114686421","https://openalex.org/W3127616799","https://openalex.org/W3175215793","https://openalex.org/W3194031147","https://openalex.org/W3208328782","https://openalex.org/W3210227505","https://openalex.org/W3214636874","https://openalex.org/W4214537185","https://openalex.org/W4214680449","https://openalex.org/W4221155884","https://openalex.org/W4224123082","https://openalex.org/W4230172274","https://openalex.org/W4285233920","https://openalex.org/W4287825269","https://openalex.org/W4298140072","https://openalex.org/W4304099366","https://openalex.org/W4307964213","https://openalex.org/W4312280786","https://openalex.org/W4312877401","https://openalex.org/W4391678082"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4401407399"],"abstract_inverted_index":{"All":[0],"current":[1],"backdoor":[2,17,29,44,98,114],"attacks":[3],"on":[4,77],"deep":[5],"learning":[6],"(DL)":[7],"models":[8],"fall":[9],"under":[10],"the":[11,27,31,90],"category":[12],"of":[13,37,53,93],"a":[14,24,41,46,51,57,67,124],"vertical":[15],"class":[16,25],"(VCB).In":[18],"VCB":[19,79],"attacks,":[20,80],"any":[21],"sample":[22],"from":[23],"activates":[26],"implanted":[28],"when":[30,61],"secret":[32],"trigger":[33,52],"is":[34,40],"present,":[35],"regardless":[36],"whether":[38],"it":[39],"sub-type":[42],"source-class-agnostic":[43],"or":[45,66],"source-class-specific":[47],"backdoor.":[48],"For":[49],"example,":[50],"sunglasses":[54],"could":[55],"mislead":[56],"facial":[58],"recognition":[59],"model":[60],"either":[62],"an":[63],"arbitrary":[64],"(source-class-agnostic)":[65],"specific":[68],"(source-class-specific)":[69],"person":[70],"wears":[71],"sunglasses.":[72],"Existing":[73],"defense":[74],"strategiesoverwhelmingly":[75],"focus":[76,88],"countering":[78],"especially":[81],"those":[82,117],"that":[83,118],"are":[84],"source-class-agnostic.":[85],"This":[86],"narrow":[87],"neglects":[89],"potential":[91],"threat":[92],"other":[94],"simpler":[95],"yet":[96],"general":[97],"types,":[99,115],"leading":[100],"to":[101,109],"false":[102],"security":[103],"implications.":[104],"It":[105],"is,":[106],"therefore,":[107],"crucial":[108],"discover":[110],"and":[111],"elucidate":[112],"unknown":[113],"particularly":[116],"can":[119],"be":[120],"easily":[121],"implemented,":[122],"as":[123],"mandatory":[125],"step":[126],"before":[127],"developing":[128],"countermeasures.":[129]},"counts_by_year":[{"year":2025,"cited_by_count":7}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}