{"id":"https://openalex.org/W4404612291","doi":"https://doi.org/10.1145/3689932.3694763","title":"Adversarially Robust Anti-Backdoor Learning","display_name":"Adversarially Robust Anti-Backdoor Learning","publication_year":2024,"publication_date":"2024-11-06","ids":{"openalex":"https://openalex.org/W4404612291","doi":"https://doi.org/10.1145/3689932.3694763"},"language":"en","primary_location":{"id":"doi:10.1145/3689932.3694763","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3689932.3694763","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 Workshop on Artificial Intelligence and Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3689932.3694763","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101722130","display_name":"Qi Zhao","orcid":"https://orcid.org/0000-0003-0944-8058"},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Qi Zhao","raw_affiliation_strings":["KASTEL Security Research Labs, Karlsruhe Institute of Technology (KIT), Karlsruhe, Baden-Wuerttemberg, Germany"],"raw_orcid":"https://orcid.org/0000-0003-0944-8058","affiliations":[{"raw_affiliation_string":"KASTEL Security Research Labs, Karlsruhe Institute of Technology (KIT), Karlsruhe, Baden-Wuerttemberg, Germany","institution_ids":["https://openalex.org/I102335020"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5040751355","display_name":"Christian Wressnegger","orcid":"https://orcid.org/0009-0007-1493-9552"},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Christian Wressnegger","raw_affiliation_strings":["KASTEL Security Research Labs, Karlsruhe Institute of Technology (KIT), Karlsruhe, Baden-Wuerttemberg, Germany"],"raw_orcid":"https://orcid.org/0009-0007-1493-9552","affiliations":[{"raw_affiliation_string":"KASTEL Security Research Labs, Karlsruhe Institute of Technology (KIT), Karlsruhe, Baden-Wuerttemberg, Germany","institution_ids":["https://openalex.org/I102335020"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I102335020"],"apc_list":null,"apc_paid":null,"fwci":0.6841,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.7154667,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"77","last_page":"88"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9810000061988831,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11515","display_name":"Bacillus and Francisella bacterial research","score":0.9369000196456909,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9837285280227661},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6493847370147705},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.43490445613861084},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3410225212574005},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.18179810047149658}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9837285280227661},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6493847370147705},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.43490445613861084},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3410225212574005},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.18179810047149658}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3689932.3694763","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3689932.3694763","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 Workshop on Artificial Intelligence and Security","raw_type":"proceedings-article"},{"id":"pmh:oai:EVASTAR-Karlsruhe.de:1000176740","is_oa":true,"landing_page_url":"https://publikationen.bibliothek.kit.edu/1000176740","pdf_url":"https://publikationen.bibliothek.kit.edu/1000176740/155791847","source":{"id":"https://openalex.org/S4306401992","display_name":"Repository KITopen (Karlsruhe Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I102335020","host_organization_name":"Karlsruhe Institute of Technology","host_organization_lineage":["https://openalex.org/I102335020"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"doc-type:conferenceObject"}],"best_oa_location":{"id":"doi:10.1145/3689932.3694763","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3689932.3694763","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 Workshop on Artificial Intelligence and Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321114","display_name":"Bundesministerium f\u00fcr Bildung und Forschung","ror":"https://ror.org/04pz7b180"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W2067713319","https://openalex.org/W2133059825","https://openalex.org/W2180612164","https://openalex.org/W2194775991","https://openalex.org/W2243397390","https://openalex.org/W2521795527","https://openalex.org/W2753783305","https://openalex.org/W2807363941","https://openalex.org/W2963163009","https://openalex.org/W2963857521","https://openalex.org/W2966104011","https://openalex.org/W2981873476","https://openalex.org/W2990270730","https://openalex.org/W3035682985","https://openalex.org/W3042368254","https://openalex.org/W3127943761","https://openalex.org/W3163966458","https://openalex.org/W4214564822","https://openalex.org/W4214680449","https://openalex.org/W4224952733","https://openalex.org/W4247200422","https://openalex.org/W4286567539","https://openalex.org/W4312536478","https://openalex.org/W4313192591","https://openalex.org/W4380607137","https://openalex.org/W4385973175","https://openalex.org/W4386071506","https://openalex.org/W4386072159","https://openalex.org/W4386076050","https://openalex.org/W4390874545","https://openalex.org/W4396817314","https://openalex.org/W4402264526"],"related_works":["https://openalex.org/W2961085424","https://openalex.org/W4306674287","https://openalex.org/W3046775127","https://openalex.org/W4394896187","https://openalex.org/W3170094116","https://openalex.org/W4386462264","https://openalex.org/W3107602296","https://openalex.org/W4364306694","https://openalex.org/W4312192474","https://openalex.org/W4283697347"],"abstract_inverted_index":{"Defending":[0],"against":[1,74,184],"data":[2,97],"poisoning-based":[3],"backdoors":[4,78,192],"at":[5,155],"training":[6,36,96,112],"time":[7],"is":[8,55,65],"notoriously":[9],"difficult":[10],"due":[11],"to":[12,101,122,133,138],"the":[13,26,30,68,81,94,116,124,127,139,150,157,163,167,173,182],"wide":[14],"range":[15],"of":[16,32],"attack":[17],"variants.":[18],"Recent":[19],"attacks":[20],"use":[21,99],"perturbations/triggers":[22],"subtly":[23],"entangled":[24],"with":[25,154,195],"benign":[27],"features,":[28],"impeding":[29],"separation":[31,54],"poisonous":[33,169],"and":[34,77,98],"clean":[35,43],"samples":[37,113,170],"as":[38],"required":[39],"for":[40,83,105,114],"learning":[41,199],"a":[42,52,90,134,147],"model.":[44,206],"In":[45],"this":[46],"paper,":[47],"we":[48,88,109,144],"demonstrate":[49],"that":[50,70,129],"such":[51],"strict":[53],"not":[56],"necessarily":[57],"needed":[58],"in":[59,67,162],"practice,":[60],"though.":[61],"Our":[62],"method,":[63],"A-ABL,":[64],"rooted":[66],"observation":[69],"considering":[71],"training-time":[72],"defenses":[73],"adversarial":[75,103,117,185],"examples":[76,104],"simultaneously":[79],"relaxes":[80],"requirements":[82],"each":[84,106],"task":[85],"individually.":[86],"First,":[87],"learn":[89],"naive":[91],"model":[92,148,183],"on":[93,149,193],"entire":[95],"it":[100],"derive":[102],"sample.":[107],"Second,":[108],"remove":[110],"those":[111],"which":[115],"perturbation":[118,159],"(budget)":[119],"was":[120],"insufficient":[121],"flip":[123],"prediction,":[125],"following":[126],"rationale":[128],"these":[130],"are":[131],"related":[132],"profoundly":[135],"embedded":[136],"shortcut":[137],"backdoor's":[140],"target":[141],"class.":[142],"Finally,":[143],"adversarially":[145,204],"train":[146],"remaining":[151,168],"data.":[152],"Training":[153],"least":[156],"same":[158],"budget":[160],"used":[161],"first":[164],"step":[165],"pushes":[166],"away":[171],"from":[172],"backdoor":[174,177],"target,":[175],"preventing":[176],"injection":[178],"while":[179],"also":[180],"hardening":[181],"examples.":[186],"This":[187],"way,":[188],"our":[189],"method":[190],"removes":[191],"par":[194],"more":[196],"complex":[197],"anti-backdoor":[198],"techniques,":[200],"additionally":[201],"yielding":[202],"an":[203],"robust":[205]},"counts_by_year":[{"year":2025,"cited_by_count":2}],"updated_date":"2026-08-09T07:27:16.801131","created_date":"2025-10-10T00:00:00"}