{"id":"https://openalex.org/W4403487921","doi":"https://doi.org/10.3233/faia240695","title":"Defending Our Privacy with Backdoors","display_name":"Defending Our Privacy with Backdoors","publication_year":2024,"publication_date":"2024-10-16","ids":{"openalex":"https://openalex.org/W4403487921","doi":"https://doi.org/10.3233/faia240695"},"language":"en","primary_location":{"id":"doi:10.3233/faia240695","is_oa":true,"landing_page_url":"https://doi.org/10.3233/faia240695","pdf_url":"https://ebooks.iospress.nl/pdf/doi/10.3233/FAIA240695","source":{"id":"https://openalex.org/S4210201731","display_name":"Frontiers in artificial intelligence and applications","issn_l":"0922-6389","issn":["0922-6389","1879-8314"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Frontiers in Artificial Intelligence and Applications","raw_type":"book-chapter"},"type":"book-chapter","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://ebooks.iospress.nl/pdf/doi/10.3233/FAIA240695","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5016622690","display_name":"Dominik Hintersdorf","orcid":"https://orcid.org/0000-0003-4976-6894"},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]},{"id":"https://openalex.org/I33256026","display_name":"German Research Centre for Artificial Intelligence","ror":"https://ror.org/01ayc5b57","country_code":"DE","type":"funder","lineage":["https://openalex.org/I33256026"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Dominik Hintersdorf","raw_affiliation_strings":["German Research Center for Artificial Intelligence","Technical University of Darmstadt"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"German Research Center for Artificial Intelligence","institution_ids":["https://openalex.org/I33256026"]},{"raw_affiliation_string":"Technical University of Darmstadt","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058576517","display_name":"Lukas Struppek","orcid":null},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]},{"id":"https://openalex.org/I33256026","display_name":"German Research Centre for Artificial Intelligence","ror":"https://ror.org/01ayc5b57","country_code":"DE","type":"funder","lineage":["https://openalex.org/I33256026"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Lukas Struppek","raw_affiliation_strings":["German Research Center for Artificial Intelligence","Technical University of Darmstadt"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"German Research Center for Artificial Intelligence","institution_ids":["https://openalex.org/I33256026"]},{"raw_affiliation_string":"Technical University of Darmstadt","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064701353","display_name":"Daniel Neider","orcid":"https://orcid.org/0000-0001-9276-6342"},"institutions":[{"id":"https://openalex.org/I200332995","display_name":"TU Dortmund University","ror":"https://ror.org/01k97gp34","country_code":"DE","type":"education","lineage":["https://openalex.org/I200332995"]},{"id":"https://openalex.org/I4210108888","display_name":"University Alliance","ror":"https://ror.org/020pnfy52","country_code":"GB","type":"education","lineage":["https://openalex.org/I4210108888"]},{"id":"https://openalex.org/I4210139618","display_name":"Shanghai Key Laboratory of Trustworthy Computing","ror":"https://ror.org/030qbr085","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210139618"]}],"countries":["CN","DE","GB"],"is_corresponding":false,"raw_author_name":"Daniel Neider","raw_affiliation_strings":["Center for Trustworthy Data Science and Security, University Alliance Ruhr","TU Dortmund University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Center for Trustworthy Data Science and Security, University Alliance Ruhr","institution_ids":["https://openalex.org/I4210108888","https://openalex.org/I4210139618"]},{"raw_affiliation_string":"TU Dortmund University","institution_ids":["https://openalex.org/I200332995"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5037636074","display_name":"Kristian Kersting","orcid":"https://orcid.org/0000-0002-2873-9152"},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]},{"id":"https://openalex.org/I33256026","display_name":"German Research Centre for Artificial Intelligence","ror":"https://ror.org/01ayc5b57","country_code":"DE","type":"funder","lineage":["https://openalex.org/I33256026"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Kristian Kersting","raw_affiliation_strings":["Centre for Cognitive Science TU Darmstadt","German Research Center for Artificial Intelligence","Hessian Center for AI (hessian.AI)","Technical University of Darmstadt"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Centre for Cognitive Science TU Darmstadt","institution_ids":["https://openalex.org/I31512782"]},{"raw_affiliation_string":"German Research Center for Artificial Intelligence","institution_ids":["https://openalex.org/I33256026"]},{"raw_affiliation_string":"Hessian Center for AI (hessian.AI)","institution_ids":[]},{"raw_affiliation_string":"Technical University of Darmstadt","institution_ids":["https://openalex.org/I31512782"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":10.252,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.97933913,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":95},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9728999733924866,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9728999733924866,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.7467447519302368},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6186330318450928},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.39741551876068115},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.37863948941230774}],"concepts":[{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.7467447519302368},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6186330318450928},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.39741551876068115},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.37863948941230774}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3233/faia240695","is_oa":true,"landing_page_url":"https://doi.org/10.3233/faia240695","pdf_url":"https://ebooks.iospress.nl/pdf/doi/10.3233/FAIA240695","source":{"id":"https://openalex.org/S4210201731","display_name":"Frontiers in artificial intelligence and applications","issn_l":"0922-6389","issn":["0922-6389","1879-8314"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Frontiers in Artificial Intelligence and Applications","raw_type":"book-chapter"}],"best_oa_location":{"id":"doi:10.3233/faia240695","is_oa":true,"landing_page_url":"https://doi.org/10.3233/faia240695","pdf_url":"https://ebooks.iospress.nl/pdf/doi/10.3233/FAIA240695","source":{"id":"https://openalex.org/S4210201731","display_name":"Frontiers in artificial intelligence and applications","issn_l":"0922-6389","issn":["0922-6389","1879-8314"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Frontiers in Artificial Intelligence and Applications","raw_type":"book-chapter"},"sustainable_development_goals":[{"score":0.6700000166893005,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4403487921.pdf"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"The":[0,142],"proliferation":[1],"of":[2,19,38,78,92,109,114,119,144,152,189],"large":[3],"AI":[4],"models":[5,44,82,192],"trained":[6,193],"on":[7,66,156,177,194],"uncurated,":[8],"often":[9],"sensitive":[10,110],"web-scraped":[11,196],"data":[12,31],"has":[13,52],"raised":[14],"significant":[15],"privacy":[16,33,165,188],"concerns.":[17],"One":[18],"the":[20,29,36,43,107,120,135,150,187],"concerns":[21],"is":[22,48],"that":[23],"adversaries":[24],"can":[25],"extract":[26],"information":[27,41],"about":[28],"training":[30],"using":[32,162],"attacks.":[34],"Unfortunately,":[35],"task":[37],"removing":[39],"specific":[40],"from":[42,80,95,134],"without":[45],"sacrificing":[46],"performance":[47,161],"not":[49],"straightforward":[50],"and":[51,76,180],"proven":[53],"to":[54,69,131,137,185],"be":[55,132],"challenging.":[56],"We":[57],"propose":[58],"a":[59,88,138,163,173,182],"rather":[60],"easy":[61],"yet":[62],"effective":[63],"defense":[64,155],"based":[65],"backdoor":[67,178],"attacks":[68,179],"remove":[70],"private":[71],"information,":[72],"such":[73],"as":[74],"names":[75],"faces":[77],"individuals,":[79],"vision-language":[81],"by":[83,98,158],"fine-tuning":[84],"them":[85,94],"for":[86,167],"only":[87],"few":[89],"minutes":[90],"instead":[91,118],"re-training":[93],"scratch.":[96],"Specifically,":[97],"strategically":[99],"inserting":[100],"backdoors":[101],"into":[102],"text":[103],"encoders,":[104,126],"we":[105,127],"align":[106],"embeddings":[108,130],"phrases":[111],"with":[112],"those":[113],"neutral":[115],"terms\u2013\u201ca":[116],"person\u201d":[117],"person\u2019s":[121],"actual":[122],"name.":[123],"For":[124],"image":[125],"map":[128],"individuals\u2019":[129],"removed":[133],"model":[136],"universal,":[139],"anonymous":[140],"embedding.":[141],"results":[143],"our":[145,153],"extensive":[146],"experimental":[147],"evaluation":[148],"demonstrate":[149],"effectiveness":[151],"backdoor-based":[154],"CLIP":[157],"assessing":[159],"its":[160],"specialized":[164],"attack":[166],"zero-shot":[168],"classifiers.":[169],"Our":[170],"approach":[171],"provides":[172],"new":[174],"\u201cdual-use\u201d":[175],"perspective":[176],"presents":[181],"promising":[183],"avenue":[184],"enhance":[186],"individuals":[190],"within":[191],"uncurated":[195],"data.":[197]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}