arrow
返回

Backdoor Learning: A Survey

delete2024-01-01
delete169
delete
OA
AI
Y
Yiming Li
蒋
蒋勇 (Yong Jiang)
Z
Zhifeng Li
S
Shu‐Tao Xia *
DOI:10.1109/TNNLS.2022.3182979delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Backdoor attack intends to embed hidden backdoors into deep neural networks (DNNs), so that the attacked models perform well on benign samples, whereas their predictions will be maliciously changed if the hidden backdoor is activated by attacker-specified triggers. This threat could happen when the training process is not fully controlled, such as training on third-party datasets or adopting third-party models, which poses a new and realistic threat. Although backdoor learning is an emerging and rapidly growing research area, there is still no comprehensive and timely review of it. In this article, we present the first comprehensive survey of this realm. We summarize and categorize existing backdoor attacks and defenses based on their characteristics, and provide a unified framework for analyzing poisoning-based backdoor attacks. Besides, we also analyze the relation between backdoor attacks and relevant fields (i.e., adversarial attacks and data poisoning), and summarize widely adopted benchmark datasets. Finally, we briefly outline certain future research directions relying upon reviewed works. A curated list of backdoor-related resources is also available at https://github.com/THUYimingLi/backdoor-learning-resources.
Keyword:
Training
Predictive models
Taxonomy
Task analysis
Schedules
Deep learning
Security
AI security
backdoor attack
backdoor defense
backdoor learning
deep learning

期刊

IEEE Transactions on Neural Networks and Learning Systems 封面图
IEEE Transactions on Neural Networks and Learning Systems
IF:
8.9
论文数:
7.6K
被引数:
7.2W

机构

T
Tsinghua Shenzhen International Graduate School
学者数:
6.8K
论文数: 4.9K
被引数: 9
P
Peng Cheng Laboratory
学者数:
1.7K
论文数: 1.8K
被引数: 2.0K
引用论文

引用论文

A Versatile One-pot Synthesis of Symmetrical N-Tosylazamacrocycles
err1985-01-01
err0
errOAAI
errSebastiano Pappalardo; Francesco Bottino; Michele Di Grazia; Paolo Finocchiaro; Antonino Mamo
err分享
err收藏
Mistuning Identification and Model Updating of an Industrial Blisk
err2007-01-01
err0
errOAAI
errD. Laxalde; F. Thouverez; J.-J. Sinou; J.-P. Lombard; S. Baumhauer
err分享
err收藏
err分享
err收藏
Glycan shield and fusion activation of a deltacoronavirus spike glycoprotein fine-tuned for enteric infections
err
IF0
err2017-11-22
err0
PREAI
errX. Xiong; M.A. Tortorici; S. Snijder; C. Yoshioka; A.C. Walls; W. Li; A.T. McGuire; F.A. Rey; B.J. Bosch; D. Veesler
err分享
err收藏
err分享
err收藏
Cooperative ordering in lattices of interacting two-level dipoles
err2015-12-14
err0
errOAAI
errRobert J. Bettles; Simon A. Gardiner; Charles S. Adams
err分享
err收藏
学者 查看更多内容