{"id":"https://openalex.org/W4285601739","doi":"https://doi.org/10.24963/ijcai.2022/206","title":"Eliminating Backdoor Triggers for Deep Neural Networks Using Attention Relation Graph Distillation","display_name":"Eliminating Backdoor Triggers for Deep Neural Networks Using Attention Relation Graph Distillation","publication_year":2022,"publication_date":"2022-07-01","ids":{"openalex":"https://openalex.org/W4285601739","doi":"https://doi.org/10.24963/ijcai.2022/206"},"language":"en","primary_location":{"id":"doi:10.24963/ijcai.2022/206","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2022/206","pdf_url":"https://www.ijcai.org/proceedings/2022/0206.pdf","source":{"id":"https://openalex.org/S4363608755","display_name":"Proceedings of the Thirty-First International Joint Conference on Artificial Intelligence","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-First International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://www.ijcai.org/proceedings/2022/0206.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5081669284","display_name":"Jun Xia","orcid":"https://orcid.org/0000-0003-0245-8499"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jun Xia","raw_affiliation_strings":["East China Normal University","MoE Eng. Research Center of SW/HW Co-Design Tech. and App., East China Normal University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"East China Normal University","institution_ids":["https://openalex.org/I66867065"]},{"raw_affiliation_string":"MoE Eng. Research Center of SW/HW Co-Design Tech. and App., East China Normal University","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067164243","display_name":"Ting Wang","orcid":"https://orcid.org/0000-0002-7223-8849"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ting Wang","raw_affiliation_strings":["East China Normal University","MoE Eng. Research Center of SW/HW Co-Design Tech. and App., East China Normal University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"East China Normal University","institution_ids":["https://openalex.org/I66867065"]},{"raw_affiliation_string":"MoE Eng. Research Center of SW/HW Co-Design Tech. and App., East China Normal University","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025619718","display_name":"Jiepin Ding","orcid":"https://orcid.org/0000-0002-3924-5107"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiepin Ding","raw_affiliation_strings":["East China Normal University","MoE Eng. Research Center of SW/HW Co-Design Tech. and App., East China Normal University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"East China Normal University","institution_ids":["https://openalex.org/I66867065"]},{"raw_affiliation_string":"MoE Eng. Research Center of SW/HW Co-Design Tech. and App., East China Normal University","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030210439","display_name":"Xian Wei","orcid":"https://orcid.org/0000-0002-9566-7814"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xian Wei","raw_affiliation_strings":["East China Normal University","MoE Eng. Research Center of SW/HW Co-Design Tech. and App., East China Normal University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"East China Normal University","institution_ids":["https://openalex.org/I66867065"]},{"raw_affiliation_string":"MoE Eng. Research Center of SW/HW Co-Design Tech. and App., East China Normal University","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5025413633","display_name":"Mingsong Chen","orcid":"https://orcid.org/0000-0002-3922-0989"},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]},{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingsong Chen","raw_affiliation_strings":["East China Normal University","Shanghai Institute of Intelligent Science and Technology, Tongji University","MoE Eng. Research Center of SW/HW Co-Design Tech. and App., East China Normal University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"East China Normal University","institution_ids":["https://openalex.org/I66867065"]},{"raw_affiliation_string":"Shanghai Institute of Intelligent Science and Technology, Tongji University","institution_ids":["https://openalex.org/I116953780"]},{"raw_affiliation_string":"MoE Eng. Research Center of SW/HW Co-Design Tech. and App., East China Normal University","institution_ids":["https://openalex.org/I66867065"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.0106,"has_fulltext":false,"cited_by_count":30,"citation_normalized_percentile":{"value":0.92843891,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1481","last_page":"1487"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.9354000091552734,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9174000024795532,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9712741374969482},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6612319350242615},{"id":"https://openalex.org/keywords/relation","display_name":"Relation (database)","score":0.6367912888526917},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5609108805656433},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5019030570983887},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.49355852603912354},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4690108001232147},{"id":"https://openalex.org/keywords/distillation","display_name":"Distillation","score":0.46088123321533203},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.2189331352710724},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.18921145796775818},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.12193500995635986},{"id":"https://openalex.org/keywords/chemistry","display_name":"Chemistry","score":0.08917427062988281}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9712741374969482},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6612319350242615},{"id":"https://openalex.org/C25343380","wikidata":"https://www.wikidata.org/wiki/Q277521","display_name":"Relation (database)","level":2,"score":0.6367912888526917},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5609108805656433},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5019030570983887},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.49355852603912354},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4690108001232147},{"id":"https://openalex.org/C204030448","wikidata":"https://www.wikidata.org/wiki/Q101017","display_name":"Distillation","level":2,"score":0.46088123321533203},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2189331352710724},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.18921145796775818},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.12193500995635986},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.08917427062988281},{"id":"https://openalex.org/C178790620","wikidata":"https://www.wikidata.org/wiki/Q11351","display_name":"Organic chemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.24963/ijcai.2022/206","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2022/206","pdf_url":"https://www.ijcai.org/proceedings/2022/0206.pdf","source":{"id":"https://openalex.org/S4363608755","display_name":"Proceedings of the Thirty-First International Joint Conference on Artificial Intelligence","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-First International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.24963/ijcai.2022/206","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2022/206","pdf_url":"https://www.ijcai.org/proceedings/2022/0206.pdf","source":{"id":"https://openalex.org/S4363608755","display_name":"Proceedings of the Thirty-First International Joint Conference on Artificial Intelligence","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-First International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/8","display_name":"Decent work and economic growth","score":0.41999998688697815}],"awards":[{"id":"https://openalex.org/G1706087102","display_name":null,"funder_award_id":"61872147","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G2823754234","display_name":"\u4e0d\u786e\u5b9a\u73af\u5883\u4e0b\u4fe1\u606f\u7269\u7406\u7cfb\u7edf\u9ad8\u6548\u53ef\u4fe1\u6784\u9020\u5173\u952e\u6280\u672f\u7814\u7a76","funder_award_id":"61872147","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6156166541","display_name":null,"funder_award_id":"YBNLTS2022-008","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G7500725462","display_name":null,"funder_award_id":"2018YFB2101300","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8718566389","display_name":null,"funder_award_id":"2018YFB2101300","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4285601739.pdf","grobid_xml":"https://content.openalex.org/works/W4285601739.grobid-xml"},"referenced_works_count":25,"referenced_works":["https://openalex.org/W2105880865","https://openalex.org/W2194775991","https://openalex.org/W2561238782","https://openalex.org/W2753783305","https://openalex.org/W2774423163","https://openalex.org/W2898759955","https://openalex.org/W2916360674","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W2955192706","https://openalex.org/W2963857521","https://openalex.org/W2964082701","https://openalex.org/W3012113073","https://openalex.org/W3015678314","https://openalex.org/W3023868144","https://openalex.org/W3037405620","https://openalex.org/W3105979354","https://openalex.org/W3107337211","https://openalex.org/W3114686421","https://openalex.org/W3121478722","https://openalex.org/W3169024389","https://openalex.org/W3175215793","https://openalex.org/W3189935768","https://openalex.org/W4289300166","https://openalex.org/W4294506858"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4386080799","https://openalex.org/W3140988292","https://openalex.org/W4317672133","https://openalex.org/W4386185023"],"abstract_inverted_index":{"Due":[0],"to":[1,17,140,152],"the":[2,24,66,88,105],"prosperity":[3],"of":[4,65,107],"Artificial":[5],"Intelligence":[6],"(AI)":[7],"techniques,":[8],"more":[9,11,119],"and":[10,111],"backdoors":[12,122],"are":[13],"designed":[14],"by":[15,138,150],"adversaries":[16],"attack":[18],"Deep":[19],"Neural":[20,27],"Networks":[21],"(DNNs).":[22],"Although":[23],"state-of-the-art":[25],"method":[26],"Attention":[28,80,99],"Distillation":[29,83],"(NAD)":[30],"can":[31,118,147],"effectively":[32,120],"erase":[33],"backdoor":[34,57,76,133],"triggers":[35],"from":[36,41],"DNNs,":[37],"it":[38],"still":[39],"suffers":[40],"non-negligible":[42],"Attack":[43],"Success":[44],"Rate":[45],"(ASR)":[46],"together":[47],"with":[48,93],"lowered":[49],"classification":[50],"ACCuracy":[51],"(ACC),":[52],"since":[53],"NAD":[54,137],"focuses":[55],"on":[56,104],"defense":[58,77],"using":[59,96],"attention":[60,63,91],"features":[61,92],"(i.e.,":[62],"maps)":[64],"same":[67],"order.":[68],"In":[69],"this":[70],"paper,":[71],"we":[72],"introduce":[73],"a":[74],"novel":[75],"framework":[78],"named":[79],"Relation":[81,100],"Graph":[82],"(ARGD),":[84],"which":[85],"fully":[86],"explores":[87],"correlation":[89],"among":[90],"different":[94],"orders":[95],"our":[97],"proposed":[98],"Graphs":[101],"(ARGs).":[102],"Based":[103],"alignment":[106],"ARGs":[108],"between":[109],"teacher":[110],"student":[112],"models":[113],"during":[114],"knowledge":[115],"distillation,":[116],"ARGD":[117,135],"eradicate":[121],"than":[123],"NAD.":[124],"Comprehensive":[125],"experimental":[126],"results":[127],"show":[128],"that,":[129],"against":[130],"six":[131],"latest":[132],"attacks,":[134],"outperforms":[136],"up":[139,151],"94.85%":[141],"reduction":[142],"in":[143],"ASR,":[144],"while":[145],"ACC":[146],"be":[148],"improved":[149],"3.23%.":[153]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":13},{"year":2023,"cited_by_count":8}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}