{"id":"https://openalex.org/W7163566441","doi":"https://doi.org/10.1145/3779208.3785283","title":"Purified Distillation Slimming (PDS) for Robust Backdoor Defense","display_name":"Purified Distillation Slimming (PDS) for Robust Backdoor Defense","publication_year":2026,"publication_date":"2026-06-01","ids":{"openalex":"https://openalex.org/W7163566441","doi":"https://doi.org/10.1145/3779208.3785283"},"language":null,"primary_location":{"id":"doi:10.1145/3779208.3785283","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3785283","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3779208.3785283","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137900372","display_name":"Liqun Shan","orcid":"https://orcid.org/0000-0003-2489-8671"},"institutions":[{"id":"https://openalex.org/I79516672","display_name":"University of Louisiana at Lafayette","ror":"https://ror.org/01x8rc503","country_code":"US","type":"education","lineage":["https://openalex.org/I2799628689","https://openalex.org/I79516672"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Liqun Shan","raw_affiliation_strings":["University of Louisiana at Lafayette, Lafayette, LA, USA"],"raw_orcid":"https://orcid.org/0000-0003-2489-8671","affiliations":[{"raw_affiliation_string":"University of Louisiana at Lafayette, Lafayette, LA, USA","institution_ids":["https://openalex.org/I79516672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109712732","display_name":"Kaiying Han","orcid":null},"institutions":[{"id":"https://openalex.org/I79516672","display_name":"University of Louisiana at Lafayette","ror":"https://ror.org/01x8rc503","country_code":"US","type":"education","lineage":["https://openalex.org/I2799628689","https://openalex.org/I79516672"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kaiying Han","raw_affiliation_strings":["University of Louisiana at Lafayette, Lafayette, LA, USA"],"raw_orcid":"https://orcid.org/0009-0000-7548-7472","affiliations":[{"raw_affiliation_string":"University of Louisiana at Lafayette, Lafayette, LA, USA","institution_ids":["https://openalex.org/I79516672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042501577","display_name":"Yazhou Tu","orcid":"https://orcid.org/0000-0001-7640-1829"},"institutions":[{"id":"https://openalex.org/I82497590","display_name":"Auburn University","ror":"https://ror.org/02v80fc35","country_code":"US","type":"education","lineage":["https://openalex.org/I82497590"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yazhou Tu","raw_affiliation_strings":["Auburn University, Auburn, AL, USA"],"raw_orcid":"https://orcid.org/0000-0001-7640-1829","affiliations":[{"raw_affiliation_string":"Auburn University, Auburn, AL, USA","institution_ids":["https://openalex.org/I82497590"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137886596","display_name":"Insup Lee","orcid":"https://orcid.org/0000-0003-2672-1132"},"institutions":[{"id":"https://openalex.org/I79576946","display_name":"University of Pennsylvania","ror":"https://ror.org/00b30xv10","country_code":"US","type":"education","lineage":["https://openalex.org/I79576946"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Insup Lee","raw_affiliation_strings":["University of Pennsylvania, Philadelphia, PA, USA"],"raw_orcid":"https://orcid.org/0000-0003-2672-1132","affiliations":[{"raw_affiliation_string":"University of Pennsylvania, Philadelphia, PA, USA","institution_ids":["https://openalex.org/I79576946"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007411047","display_name":"Xiali Hei","orcid":"https://orcid.org/0000-0002-2438-5430"},"institutions":[{"id":"https://openalex.org/I79516672","display_name":"University of Louisiana at Lafayette","ror":"https://ror.org/01x8rc503","country_code":"US","type":"education","lineage":["https://openalex.org/I2799628689","https://openalex.org/I79516672"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiali Hei","raw_affiliation_strings":["University of Louisiana at Lafayette, Lafayette, LA, USA"],"raw_orcid":"https://orcid.org/0000-0002-2438-5430","affiliations":[{"raw_affiliation_string":"University of Louisiana at Lafayette, Lafayette, LA, USA","institution_ids":["https://openalex.org/I79516672"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"608","last_page":"624"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9897000193595886,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9897000193595886,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.0013000000035390258,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.0012000000569969416,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9977999925613403},{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.46549999713897705},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4625999927520752},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.29580000042915344},{"id":"https://openalex.org/keywords/fractionating-column","display_name":"Fractionating column","score":0.2809999883174896}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9977999925613403},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6111000180244446},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.46549999713897705},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4641999900341034},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4625999927520752},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3912999927997589},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.29580000042915344},{"id":"https://openalex.org/C154030694","wikidata":"https://www.wikidata.org/wiki/Q1436074","display_name":"Fractionating column","level":3,"score":0.2809999883174896},{"id":"https://openalex.org/C204030448","wikidata":"https://www.wikidata.org/wiki/Q101017","display_name":"Distillation","level":2,"score":0.2770000100135803},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.2648000121116638}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3779208.3785283","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3785283","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3779208.3785283","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3785283","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1066605831","display_name":null,"funder_award_id":"CNS-2231682","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W2002427601","https://openalex.org/W2097117768","https://openalex.org/W2108598243","https://openalex.org/W2194775991","https://openalex.org/W2753783305","https://openalex.org/W2807363941","https://openalex.org/W2934843808","https://openalex.org/W2963163009","https://openalex.org/W2966104011","https://openalex.org/W2970335439","https://openalex.org/W2985913519","https://openalex.org/W2986013765","https://openalex.org/W2990270730","https://openalex.org/W2999321020","https://openalex.org/W3034414373","https://openalex.org/W3047587361","https://openalex.org/W3107337211","https://openalex.org/W3114838227","https://openalex.org/W3175215793","https://openalex.org/W3205328330","https://openalex.org/W4214564822","https://openalex.org/W4214680449","https://openalex.org/W4230172274","https://openalex.org/W4288057770","https://openalex.org/W4312233756","https://openalex.org/W4312700692","https://openalex.org/W4388867373","https://openalex.org/W7133236147","https://openalex.org/W7133241446"],"related_works":[],"abstract_inverted_index":{"Backdoor":[0],"attacks":[1,121,152],"pose":[2],"significant":[3],"risks":[4],"to":[5,16,82,92,111,119],"applications":[6],"based":[7],"on":[8,165,175],"deep":[9],"neural":[10],"networks":[11],"(DNNs).":[12],"Current":[13],"defenses":[14],"fail":[15],"achieve":[17],"good":[18],"performance":[19,164],"with":[20,47],"lightweight":[21],"(compact)":[22],"models,":[23],"limited":[24],"defense":[25],"data,":[26],"and":[27,61,156,180,190],"low":[28],"poisoning":[29],"rates.":[30],"To":[31],"address":[32],"these":[33],"challenges,":[34],"we":[35,51,107,138],"propose":[36],"Purified":[37],"Distillation":[38],"Slimming":[39],"(PDS),":[40],"a":[41,87,93],"novel":[42],"knowledge":[43,80,85],"distillation":[44,81],"approach":[45,75],"equipped":[46],"iterative":[48],"pruning.":[49],"Specifically,":[50],"initialize":[52],"the":[53,57,64,68,77,103,116,124,148,162],"student":[54,94],"model":[55,60,91],"from":[56,86],"backdoored":[58,113],"teacher":[59,90],"iteratively":[62],"prune":[63,112],"student's":[65],"neurons":[66,125],"until":[67],"trigger":[69],"pattern":[70],"is":[71],"deactivated.":[72],"Such":[73],"an":[74],"leverages":[76],"efficacy":[78],"of":[79,150,170],"transfer":[83],"purified":[84],"potentially":[88],"compromised":[89],"model,":[95],"thereby":[96],"filtering":[97],"out":[98],"backdoor":[99,120,136,151],"triggers":[100],"embedded":[101],"within":[102],"training":[104],"data.":[105],"Concurrently,":[106],"employ":[108],"network":[109,184],"slimming":[110],"neurons,":[114],"enhancing":[115],"model's":[117,163],"resilience":[118],"by":[122],"reducing":[123],"that":[126,140],"adversaries":[127],"can":[128],"exploit.":[129],"Through":[130],"comprehensive":[131],"experiments":[132],"against":[133],"17":[134],"SOTA":[135],"attacks,":[137],"demonstrate":[139],"our":[141],"proposed":[142],"method":[143],"not":[144],"only":[145],"effectively":[146],"mitigates":[147],"impact":[149],"but":[153],"also":[154],"preserves,":[155],"in":[157],"some":[158],"cases":[159],"even":[160],"enhances,":[161],"benign":[166],"tasks.":[167],"The":[168],"effectiveness":[169],"PDS":[171],"has":[172],"been":[173],"verified":[174],"multiple":[176],"datasets":[177],"(Cifar-10,":[178],"GTSRB,":[179],"ImageNet)":[181],"across":[182],"several":[183],"architectures":[185],"(ResNet,":[186],"VGG,":[187],"MobileNet,":[188],"EfficientNet,":[189],"GoogLeNet).":[191]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-06-05T00:00:00"}