{"id":"https://openalex.org/W7137842083","doi":"https://doi.org/10.1609/aaai.v40i30.39747","title":"Injection, Attack and Erasure: Revocable Backdoor Attacks via Machine Unlearning","display_name":"Injection, Attack and Erasure: Revocable Backdoor Attacks via Machine Unlearning","publication_year":2026,"publication_date":"2026-03-14","ids":{"openalex":"https://openalex.org/W7137842083","doi":"https://doi.org/10.1609/aaai.v40i30.39747"},"language":null,"primary_location":{"id":"doi:10.1609/aaai.v40i30.39747","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i30.39747","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/39747/43708","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://ojs.aaai.org/index.php/AAAI/article/download/39747/43708","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5129715920","display_name":"Baogang Song","orcid":null},"institutions":[{"id":"https://openalex.org/I196699116","display_name":"Wuhan University of Technology","ror":"https://ror.org/03fe7t173","country_code":"CN","type":"education","lineage":["https://openalex.org/I196699116"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Baogang Song","raw_affiliation_strings":["Wuhan University of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University of Technology","institution_ids":["https://openalex.org/I196699116"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129650551","display_name":"Dongdong Zhao","orcid":null},"institutions":[{"id":"https://openalex.org/I196699116","display_name":"Wuhan University of Technology","ror":"https://ror.org/03fe7t173","country_code":"CN","type":"education","lineage":["https://openalex.org/I196699116"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dongdong Zhao","raw_affiliation_strings":["Wuhan University of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University of Technology","institution_ids":["https://openalex.org/I196699116"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129677296","display_name":"Jianwen Xiang","orcid":null},"institutions":[{"id":"https://openalex.org/I196699116","display_name":"Wuhan University of Technology","ror":"https://ror.org/03fe7t173","country_code":"CN","type":"education","lineage":["https://openalex.org/I196699116"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianwen Xiang","raw_affiliation_strings":["Wuhan University of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University of Technology","institution_ids":["https://openalex.org/I196699116"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129718563","display_name":"Qiben Xu","orcid":null},"institutions":[{"id":"https://openalex.org/I196699116","display_name":"Wuhan University of Technology","ror":"https://ror.org/03fe7t173","country_code":"CN","type":"education","lineage":["https://openalex.org/I196699116"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiben Xu","raw_affiliation_strings":["Wuhan University of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University of Technology","institution_ids":["https://openalex.org/I196699116"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5128456445","display_name":"Zizhuo Yu","orcid":null},"institutions":[{"id":"https://openalex.org/I196699116","display_name":"Wuhan University of Technology","ror":"https://ror.org/03fe7t173","country_code":"CN","type":"education","lineage":["https://openalex.org/I196699116"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zizhuo Yu","raw_affiliation_strings":["Wuhan University of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University of Technology","institution_ids":["https://openalex.org/I196699116"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I196699116"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.06166983,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"40","issue":"30","first_page":"25518","last_page":"25526"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9937999844551086,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9937999844551086,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.0013000000035390258,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9993000030517578},{"id":"https://openalex.org/keywords/bilevel-optimization","display_name":"Bilevel optimization","score":0.41760000586509705},{"id":"https://openalex.org/keywords/culpability","display_name":"Culpability","score":0.2460000067949295},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.24120000004768372},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.23569999635219574}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9993000030517578},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6733999848365784},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5629000067710876},{"id":"https://openalex.org/C3309286","wikidata":"https://www.wikidata.org/wiki/Q4907693","display_name":"Bilevel optimization","level":3,"score":0.41760000586509705},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.35190001130104065},{"id":"https://openalex.org/C2779990267","wikidata":"https://www.wikidata.org/wiki/Q1365664","display_name":"Culpability","level":2,"score":0.2460000067949295},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.24120000004768372},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.23569999635219574},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.23489999771118164},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.22939999401569366}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1609/aaai.v40i30.39747","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i30.39747","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/39747/43708","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1609/aaai.v40i30.39747","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i30.39747","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/39747/43708","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5287879705429077}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7137842083.pdf","grobid_xml":"https://content.openalex.org/works/W7137842083.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Backdoor":[0],"attacks":[1,80],"pose":[2],"a":[3,82,101,130,185],"persistent":[4,36],"security":[5,198],"risk":[6],"to":[7,13,27,99,138,151,169],"deep":[8],"neural":[9],"networks":[10],"(DNNs)":[11],"due":[12],"their":[14],"stealth":[15],"and":[16,63,91,125,135,142,160,192],"durability.":[17],"While":[18],"recent":[19],"research":[20,191],"has":[21],"explored":[22],"leveraging":[23],"model":[24],"unlearning":[25,92,136],"mechanisms":[26],"enhance":[28],"backdoor":[29,55,59,79,89,111,171,178,189],"concealment,":[30],"existing":[31],"attack":[32,68,103,190],"strategies":[33],"still":[34],"leave":[35],"traces":[37],"that":[38,109,163],"may":[39],"be":[40,61,113],"detected":[41],"through":[42,116],"static":[43],"analysis.":[44],"In":[45],"this":[46],"work,":[47],"we":[48,128],"introduce":[49],"the":[50,58,67,74,94,110,120,145,153,197],"first":[51],"paradigm":[52],"of":[53,133,177,199],"revocable":[54,78],"attacks,":[56,172],"where":[57],"can":[60,112],"proactively":[62],"thoroughly":[64],"removed":[65],"after":[66,180],"objective":[69],"is":[70,97],"achieved.":[71],"We":[72],"formulate":[73],"trigger":[75,95],"optimization":[76,84,121],"in":[77],"as":[81],"bilevel":[83],"problem:":[85],"by":[86],"simulating":[87],"both":[88],"injection":[90,124],"processes,":[93],"generator":[96],"optimized":[98],"achieve":[100],"high":[102],"success":[104],"rate":[105],"(ASR)":[106],"while":[107,173],"ensuring":[108],"easily":[114],"erased":[115],"unlearning.":[117,181],"To":[118],"mitigate":[119],"conflict":[122],"between":[123],"removal":[126,176],"objectives,":[127],"employ":[129],"deterministic":[131],"partition":[132],"poisoning":[134],"samples":[137],"reduce":[139],"sampling-induced":[140],"variance,":[141],"further":[143],"apply":[144],"Projected":[146],"Conflicting":[147],"Gradient":[148],"(PCGrad)":[149],"technique":[150],"resolve":[152],"remaining":[154],"gradient":[155],"conflicts.":[156],"Experiments":[157],"on":[158],"CIFAR-10":[159],"ImageNet":[161],"demonstrate":[162],"our":[164],"method":[165],"maintains":[166],"ASR":[167],"comparable":[168],"state-of-the-art":[170],"enabling":[174],"effective":[175],"behavior":[179],"This":[182],"work":[183],"opens":[184],"new":[186,194],"direction":[187],"for":[188,196],"presents":[193],"challenges":[195],"machine":[200],"learning":[201],"systems.":[202]},"counts_by_year":[],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2026-03-18T00:00:00"}