{"id":"https://openalex.org/W7163554810","doi":"https://doi.org/10.1145/3779208.3806081","title":"Deep Learning Backdoor Defense via Adaptive Trigger Collisions in Latent Space","display_name":"Deep Learning Backdoor Defense via Adaptive Trigger Collisions in Latent Space","publication_year":2026,"publication_date":"2026-06-01","ids":{"openalex":"https://openalex.org/W7163554810","doi":"https://doi.org/10.1145/3779208.3806081"},"language":null,"primary_location":{"id":"doi:10.1145/3779208.3806081","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3806081","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3779208.3806081","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5110940725","display_name":"Zixun Xiong","orcid":null},"institutions":[{"id":"https://openalex.org/I108468826","display_name":"Stevens Institute of Technology","ror":"https://ror.org/02z43xh36","country_code":"US","type":"education","lineage":["https://openalex.org/I108468826"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zixun Xiong","raw_affiliation_strings":["Stevens Institute of Technology, Hoboken, New York, USA"],"raw_orcid":"https://orcid.org/0009-0004-7318-2084","affiliations":[{"raw_affiliation_string":"Stevens Institute of Technology, Hoboken, New York, USA","institution_ids":["https://openalex.org/I108468826"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006209345","display_name":"H Y Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I108468826","display_name":"Stevens Institute of Technology","ror":"https://ror.org/02z43xh36","country_code":"US","type":"education","lineage":["https://openalex.org/I108468826"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hao Wang","raw_affiliation_strings":["Stevens Institue of Technology, Hoboken, New Jersey, USA"],"raw_orcid":"https://orcid.org/0000-0002-1444-2657","affiliations":[{"raw_affiliation_string":"Stevens Institue of Technology, Hoboken, New Jersey, USA","institution_ids":["https://openalex.org/I108468826"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137849197","display_name":"Jian Li","orcid":"https://orcid.org/0000-0003-3642-3569"},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jian Li","raw_affiliation_strings":["Stony Brook University, Stony Brook, New York, USA"],"raw_orcid":"https://orcid.org/0000-0003-3642-3569","affiliations":[{"raw_affiliation_string":"Stony Brook University, Stony Brook, New York, USA","institution_ids":["https://openalex.org/I59553526"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129719179","display_name":"Yang Hua","orcid":null},"institutions":[{"id":"https://openalex.org/I126231945","display_name":"Queen's University Belfast","ror":"https://ror.org/00hswnk62","country_code":"GB","type":"education","lineage":["https://openalex.org/I126231945"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Yang Hua","raw_affiliation_strings":["Queen's University Belfast, Belfast, Northern Ireland, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0001-5536-503X","affiliations":[{"raw_affiliation_string":"Queen's University Belfast, Belfast, Northern Ireland, United Kingdom","institution_ids":["https://openalex.org/I126231945"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047722991","display_name":"Miao Pan","orcid":"https://orcid.org/0000-0003-2138-4413"},"institutions":[{"id":"https://openalex.org/I44461941","display_name":"University of Houston","ror":"https://ror.org/048sx0r50","country_code":"US","type":"education","lineage":["https://openalex.org/I44461941"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Miao Pan","raw_affiliation_strings":["University of Houston, Houston, Texas, USA"],"raw_orcid":"https://orcid.org/0000-0003-2138-4413","affiliations":[{"raw_affiliation_string":"University of Houston, Houston, Texas, USA","institution_ids":["https://openalex.org/I44461941"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5060514022","display_name":"Xiaojiang Du","orcid":"https://orcid.org/0000-0003-4235-9671"},"institutions":[{"id":"https://openalex.org/I108468826","display_name":"Stevens Institute of Technology","ror":"https://ror.org/02z43xh36","country_code":"US","type":"education","lineage":["https://openalex.org/I108468826"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiaojiang Du","raw_affiliation_strings":["Stevens Institute of Technology, Hoboken, New Jersey, USA"],"raw_orcid":"https://orcid.org/0000-0003-4235-9671","affiliations":[{"raw_affiliation_string":"Stevens Institute of Technology, Hoboken, New Jersey, USA","institution_ids":["https://openalex.org/I108468826"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"591","last_page":"607"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9684000015258789},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.6089000105857849},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5921000242233276},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5913000106811523},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5892000198364258},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.5740000009536743},{"id":"https://openalex.org/keywords/feature-learning","display_name":"Feature learning","score":0.5353000164031982},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.42010000348091125},{"id":"https://openalex.org/keywords/feature-vector","display_name":"Feature vector","score":0.3984000086784363}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9684000015258789},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6625999808311462},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6262000203132629},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.6089000105857849},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5921000242233276},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5913000106811523},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5892000198364258},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.5740000009536743},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.5353000164031982},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4596000015735626},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.42010000348091125},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.3984000086784363},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3917999863624573},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.37470000982284546},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.36880001425743103},{"id":"https://openalex.org/C160920958","wikidata":"https://www.wikidata.org/wiki/Q7662746","display_name":"Synthetic data","level":2,"score":0.3122999966144562},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.3059999942779541},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.30379998683929443},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2939999997615814},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.287200003862381},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.27619999647140503},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.27619999647140503},{"id":"https://openalex.org/C13662910","wikidata":"https://www.wikidata.org/wiki/Q193139","display_name":"Trajectory","level":2,"score":0.26759999990463257},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.2581999897956848},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.251800000667572}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3779208.3806081","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3806081","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3779208.3806081","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3806081","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.4758610427379608}],"awards":[{"id":"https://openalex.org/G2379562582","display_name":"SaTC: CORE: Small: Advancing Model Forensics with Systematic Parsing, Injection Detection, and Model Provenance Attribution","funder_award_id":"2332638","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G2420187495","display_name":"Collaborative Research: CISE MSI: RDP: CNS: Towards the Resilient NextG Network Design for Federated Learning over Mobile Devices","funder_award_id":"2431595","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G4316939315","display_name":"Collaborative Research: SaTC: CORE: Small: Critical Learning Periods Augmented Robust Federated Learning","funder_award_id":"2315612","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W1993436046","https://openalex.org/W2942091739","https://openalex.org/W3110923198","https://openalex.org/W4252979261","https://openalex.org/W4288057770","https://openalex.org/W4313192591","https://openalex.org/W4360884927","https://openalex.org/W4386072159","https://openalex.org/W4388867373","https://openalex.org/W4395047316","https://openalex.org/W4399743769","https://openalex.org/W4404324236"],"related_works":[],"abstract_inverted_index":{"Backdoor":[0],"attacks":[1,179],"in":[2,25,60,83,120,199],"data":[3,20],"outsourcing":[4],"settings":[5],"pose":[6],"severe":[7],"risks":[8],"to":[9,21,133],"deep":[10],"neural":[11],"networks.":[12],"Specifically,":[13,123],"adversaries":[14],"can":[15,50],"manipulate":[16],"externally":[17],"sourced":[18],"training":[19],"implant":[22],"hidden":[23],"behaviors":[24],"target":[26],"models":[27],"(e.g.,":[28],"incorrect":[29],"predictions":[30],"on":[31,57,76,117,191],"triggered":[32],"samples).":[33],"Existing":[34],"defenses":[35,66],"are":[36,45],"either":[37,48],"pre-processing":[38],"or":[39,69],"post-processing.":[40],"Since":[41],"the":[42,58,72,95,106,143,188,203],"two":[43],"approaches":[44],"orthogonal":[46],"and":[47,98,162,176],"one":[49,68],"independently":[51],"strengthen":[52],"real-world":[53],"defenses,":[54],"we":[55,109],"focus":[56],"latter":[59],"this":[61],"paper.":[62],"Yet":[63],"current":[64],"post-processing":[65,114],"face":[67],"more":[70],"of":[71,87,100],"following":[73],"issues:":[74],"overemphasis":[75],"output":[77,131],"logits":[78,132],"while":[79,91],"overlooking":[80],"rich":[81],"information":[82],"intermediate":[84],"layers,":[85],"injection":[86],"uncertain":[88],"new":[89],"triggers":[90],"requiring":[92],"alignment":[93],"with":[94,158,167,187],"original":[96],"triggers,":[97],"underuse":[99],"poisoned":[101,165],"model":[102],"representations.":[103],"To":[104],"overcome":[105],"aforementioned":[107],"limitations,":[108],"propose":[110],"ATClean,":[111],"an":[112,138],"adaptive":[113,139],"defense":[115,185],"based":[116],"feature":[118,156],"collisions":[119,157],"latent":[121],"space.":[122],"it":[124],"leverages":[125],"all":[126],"layers":[127],"rather":[128],"than":[129],"only":[130,154],"capture":[134],"backdoor-affected":[135],"regions":[136],"using":[137],"loss":[140],"function,":[141],"relaxes":[142],"need":[144],"for":[145],"exact":[146],"trigger":[147],"reconstruction":[148],"by":[149],"generating":[150],"adversarial":[151],"samples":[152],"that":[153,181],"enforce":[155],"a":[159,196],"theoretical":[160],"guarantee,":[161],"fully":[163],"exploits":[164],"representations":[166],"feature-collision-based":[168],"fine-tuning.":[169],"Experiments":[170],"across":[171],"benchmark":[172],"datasets,":[173],"multiple":[174],"architectures,":[175],"seven":[177],"representative":[178],"show":[180],"ATClean":[182],"achieves":[183],"state-of-the-art":[184],"effectiveness":[186],"lowest":[189],"drop":[190],"clean":[192],"data,":[193],"including":[194],"about":[195],"20%":[197],"improvement":[198],"DER,":[200],"which":[201],"measures":[202],"accuracy-defense":[204],"trade-off.":[205]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-06-05T00:00:00"}