{"id":"https://openalex.org/W4416033934","doi":"https://doi.org/10.18653/v1/2025.findings-emnlp.1293","title":"Cut the Deadwood Out: Backdoor Purification via Guided Module Substitution","display_name":"Cut the Deadwood Out: Backdoor Purification via Guided Module Substitution","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4416033934","doi":"https://doi.org/10.18653/v1/2025.findings-emnlp.1293"},"language":null,"primary_location":{"id":"doi:10.18653/v1/2025.findings-emnlp.1293","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.findings-emnlp.1293","pdf_url":"https://aclanthology.org/2025.findings-emnlp.1293.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: EMNLP 2025","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://aclanthology.org/2025.findings-emnlp.1293.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5109484883","display_name":"Yao Tong","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yao Tong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000735134","display_name":"Weijun Li","orcid":"https://orcid.org/0000-0001-5622-6955"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Weijun Li","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060320196","display_name":"Xuanli He","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xuanli He","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115728926","display_name":"Haolan Zhan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Haolan Zhan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5036737229","display_name":"Qiongkai Xu","orcid":"https://orcid.org/0000-0003-3312-6825"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Qiongkai Xu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"23760","last_page":"23783"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11522","display_name":"VLSI and FPGA Design Techniques","score":0.041200000792741776,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11522","display_name":"VLSI and FPGA Design Techniques","score":0.041200000792741776,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12029","display_name":"DNA and Biological Computing","score":0.041200000792741776,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.031700000166893005,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.670799970626831},{"id":"https://openalex.org/keywords/substitution","display_name":"Substitution (logic)","score":0.5220000147819519},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.3440000116825104},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.32580000162124634},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.2759000062942505}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.670799970626831},{"id":"https://openalex.org/C2778220771","wikidata":"https://www.wikidata.org/wiki/Q1522579","display_name":"Substitution (logic)","level":2,"score":0.5220000147819519},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.41019999980926514},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.38600000739097595},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.3440000116825104},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.33820000290870667},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.32580000162124634},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.2759000062942505},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.27459999918937683},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.2515999972820282}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.18653/v1/2025.findings-emnlp.1293","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.findings-emnlp.1293","pdf_url":"https://aclanthology.org/2025.findings-emnlp.1293.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: EMNLP 2025","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.18653/v1/2025.findings-emnlp.1293","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.findings-emnlp.1293","pdf_url":"https://aclanthology.org/2025.findings-emnlp.1293.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: EMNLP 2025","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4416033934.pdf","grobid_xml":"https://content.openalex.org/works/W4416033934.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Model":[0],"NLP":[1],"models":[2,129],"are":[3,30],"commonly":[4],"trained":[5],"(or":[6],"fine-tuned)":[7],"on":[8,60,127],"datasets":[9],"from":[10],"untrusted":[11],"platforms":[12],"like":[13,150],"HuggingFace,":[14],"posing":[15],"significant":[16],"risks":[17],"of":[18,63,106,137],"data":[19,45,114],"poisoning":[20],"attacks.A":[21],"practical":[22],"yet":[23],"underexplored":[24],"challenge":[25],"arises":[26],"when":[27],"such":[28],"backdoors":[29],"discovered":[31],"after":[32],"model":[33,66],"deployment,":[34],"making":[35],"retraining-required":[36],"defenses":[37],"less":[38],"desirable":[39,97],"due":[40],"to":[41,87,101],"computational":[42],"costs":[43],"and":[44,85,104,120,130],"constraints.In":[46],"this":[47],"work,":[48],"we":[49],"propose":[50],"Guided":[51],"Module":[52],"Substitution":[53],"(GMS),":[54],"an":[55],"effective":[56],"retrainingfree":[57],"method":[58],"based":[59],"guided":[61,80],"merging":[62,75],"the":[64,92,102,107,134,142],"victim":[65,93],"with":[67],"just":[68],"a":[69,79],"single":[70],"proxy":[71,108],"model.Unlike":[72],"prior":[73],"ad-hoc":[74],"defenses,":[76],"GMS":[77],"uses":[78],"trade-off":[81],"signal":[82],"between":[83],"utility":[84],"backdoor":[86],"selectively":[88],"replaces":[89],"modules":[90],"in":[91],"model.GMS":[94],"offers":[95],"four":[96],"properties:":[98],"(1)":[99],"robustness":[100],"choice":[103],"trustworthiness":[105],"model,":[109],"(2)":[110],"applicability":[111],"under":[112],"inaccurate":[113],"knowledge,":[115],"(3)":[116],"stability":[117],"across":[118,123],"hyperparameters,":[119],"(4)":[121],"transferability":[122],"different":[124],"attacks.Extensive":[125],"experiments":[126],"encoder":[128],"decoder":[131],"LLMs":[132],"demonstrate":[133],"strong":[135],"effectiveness":[136],"GMS.GMS":[138],"significantly":[139],"outperforms":[140],"even":[141],"strongest":[143],"defense":[144],"baseline,":[145],"particularly":[146],"against":[147],"challenging":[148],"attacks":[149],"LWS.The":[151],"code":[152],"is":[153],"available":[154],"at":[155],"https://github.com/":[156],"weijun-l/guided-module-substitution.":[157]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-11-08T00:00:00"}