{"id":"https://openalex.org/W7138247642","doi":"https://doi.org/10.1609/aaai.v40i2.37117","title":"Authority Backdoor: A Certifiable Backdoor Mechanism for Authoring DNNs","display_name":"Authority Backdoor: A Certifiable Backdoor Mechanism for Authoring DNNs","publication_year":2026,"publication_date":"2026-03-14","ids":{"openalex":"https://openalex.org/W7138247642","doi":"https://doi.org/10.1609/aaai.v40i2.37117"},"language":null,"primary_location":{"id":"doi:10.1609/aaai.v40i2.37117","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i2.37117","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/37117/41079","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://ojs.aaai.org/index.php/AAAI/article/download/37117/41079","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5129715367","display_name":"Han Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Han Yang","raw_affiliation_strings":["Southeast University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southeast University","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129729944","display_name":"Shaofeng Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shaofeng Li","raw_affiliation_strings":["Southeast University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southeast University","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129745246","display_name":"Tian Dong","orcid":null},"institutions":[{"id":"https://openalex.org/I889458895","display_name":"University of Hong Kong","ror":"https://ror.org/02zhqgq86","country_code":"HK","type":"education","lineage":["https://openalex.org/I889458895"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Tian Dong","raw_affiliation_strings":["University of Hong Kong"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Hong Kong","institution_ids":["https://openalex.org/I889458895"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129654190","display_name":"Xiangyu Xu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiangyu Xu","raw_affiliation_strings":["Southeast University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southeast University","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129682699","display_name":"Guangchi Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Guangchi Liu","raw_affiliation_strings":["Southeast University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southeast University","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5129717804","display_name":"Zhen Ling","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhen Ling","raw_affiliation_strings":["Southeast University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southeast University","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.39791073,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"40","issue":"2","first_page":"1426","last_page":"1434"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6151999831199646,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6151999831199646,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.07410000264644623,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.0544000007212162,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9803000092506409},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7583000063896179},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5738999843597412},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.3808000087738037},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.37130001187324524},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.29179999232292175},{"id":"https://openalex.org/keywords/protection-mechanism","display_name":"Protection mechanism","score":0.2897000014781952}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9803000092506409},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.823199987411499},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7583000063896179},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6284999847412109},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5738999843597412},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.3808000087738037},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.37130001187324524},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.33649998903274536},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.29179999232292175},{"id":"https://openalex.org/C2778717966","wikidata":"https://www.wikidata.org/wiki/Q4189076","display_name":"Protection mechanism","level":3,"score":0.2897000014781952},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.28839999437332153},{"id":"https://openalex.org/C174839445","wikidata":"https://www.wikidata.org/wiki/Q1134386","display_name":"Lock (firearm)","level":2,"score":0.2768999934196472},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.27639999985694885},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.27000001072883606},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.26510000228881836},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.26409998536109924},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.26269999146461487},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.2587999999523163},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2581999897956848},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.257999986410141}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1609/aaai.v40i2.37117","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i2.37117","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/37117/41079","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1609/aaai.v40i2.37117","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i2.37117","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/37117/41079","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.695309579372406,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7138247642.pdf","grobid_xml":"https://content.openalex.org/works/W7138247642.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Deep":[0],"Neural":[1],"Networks":[2],"(DNNs),":[3],"as":[4,14],"valuable":[5],"intellectual":[6],"property,":[7],"face":[8],"unauthorized":[9],"use.":[10],"Existing":[11],"protections,":[12],"such":[13,70],"digital":[15],"watermarking,":[16],"are":[17],"largely":[18],"passive;":[19],"they":[20],"provide":[21],"only":[22,75],"post-hoc":[23],"ownership":[24],"verification":[25],"and":[26,147,152],"cannot":[27],"actively":[28],"prevent":[29,114],"the":[30,53,57,77,91,101,104,108,120,150,156],"illicit":[31],"use":[32],"of":[33,79,103,155],"a":[34,40,60,67,80,84,127],"stolen":[35],"model.":[36,54],"This":[37],"work":[38],"proposes":[39],"proactive":[41],"protection":[42],"scheme,":[43,107],"dubbed":[44],"``Authority":[45],"Backdoor,\"":[46],"which":[47],"embeds":[48],"access":[49,134],"constraints":[50],"directly":[51],"into":[52],"In":[55],"particular,":[56],"scheme":[58],"utilizes":[59],"backdoor":[61],"learning":[62],"framework":[63,125],"to":[64,95,113],"intrinsically":[65],"lock":[66],"model's":[68],"utility,":[69],"that":[71],"it":[72],"performs":[73],"normally":[74],"in":[76,88],"presence":[78],"specific":[81],"trigger":[82],"(e.g.,":[83],"hardware":[85],"fingerprint).":[86],"But":[87],"its":[89],"absence,":[90],"DNN's":[92],"performance":[93],"degrades":[94],"be":[96],"useless.":[97],"To":[98],"further":[99],"enhance":[100],"security":[102],"proposed":[105,157],"authority":[106,129],"certifiable":[109,137,153],"robustness":[110,138,154],"is":[111],"integrated":[112],"an":[115],"adaptive":[116],"attacker":[117],"from":[118],"removing":[119],"implanted":[121],"backdoor.":[122],"The":[123],"resulting":[124],"establishes":[126],"secure":[128],"mechanism":[130],"for":[131],"DNNs,":[132],"combining":[133],"control":[135],"with":[136],"against":[139],"adversarial":[140],"attacks.":[141],"Extensive":[142],"experiments":[143],"on":[144],"diverse":[145],"architectures":[146],"datasets":[148],"validate":[149],"effectiveness":[151],"framework.":[158]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-03-18T00:00:00"}