Deep Learning Backdoors
Not on the map. Why?
Abstract (arXiv)
Intuitively, a backdoor attack against Deep Neural Networks (DNNs) is to inject hidden malicious behaviors into DNNs such that the backdoor model behaves legitimately for benign inputs, yet invokes a predefined malicious behavior when its input contains a malicious trigger. The trigger can take a plethora of forms, including a special object present in the image (e.g., a yellow pad), a shape filled with custom textures (e.g., logos with particular colors) or even image-wide stylizations with special filters (e.g., images altered by Nashville or Gotham filters). These filters can be applied to the original image by replacing or perturbing a set of image pixels.
Key facts. Cited by 19 papers in the map (data through 7 Oct 2026). First posted on arXiv 16 Jul 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 10; 2022: 2; 2023: 4; 2024: 2; 2025: 1.
19 papers.
Sort:
By area:
- 2021Backdoor Scanning for Deep Neural Networks through K-Arm Optimizationcited by 96
- 2021Hidden Backdoors in Human-Centric Language Modelscited by 83
- 2022BppAttack: Stealthy and Efficient Trojan Attacks against Deep Neural Networks via Image Quantization and Contrastive Adversarial Learningcited by 82
- 2021Red Alarm for Pre-trained Models: Universal Vulnerability to Neuron-Level Backdoor Attackscited by 44
- 2023UNICORN: A Unified Backdoor Trigger Inversion Frameworkcited by 44
- 2021Can You Hear It? Backdoor Attacks via Ultrasonic Triggerscited by 41
- 2021The Threat of Offensive AI to Organizationscited by 37
- 2021Quantifying and Mitigating Privacy Risks of Contrastive Learningcited by 35
- 2021Dual-Key Multimodal Backdoors for Visual Question Answeringcited by 35
- 2024Test-Time Backdoor Attacks on Multimodal Large Language Modelscited by 35
- 2021Grounding Representation Similarity with Statistical Testingcited by 28
- 2023Analyzing And Editing Inner Mechanisms Of Backdoored Language Modelscited by 22
7 more
- 2023Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Surveycited by 17
- 2022Backdoor Vulnerabilities in Normally Trained Deep Learning Modelscited by 12
- 2023Two-in-One: A Model Hijacking Attack Against Text Generation Modelscited by 11
- 2021EX-RAY: Distinguishing Injected Backdoor from Natural Features in Neural Networks by Examining Differential Feature Symmetrycited by 5
- 2021Oriole: Thwarting Privacy against Trustworthy Deep Learning Modelscited by 2
- 2024End-to-End Anti-Backdoor Learning on Images and Time Seriescited by 1
- 2025Char-mander Use mBackdoor! A Study of Cross-lingual Backdoor Attacks in Multilingual LLMscited by 0
- 2025Char-mander Use mBackdoor! A Study of Cross-lingual Backdoor Attacks in Multilingual LLMs24 Feb 2025
- 2024Test-Time Backdoor Attacks on Multimodal Large Language Models13 Feb 2024
- 2024End-to-End Anti-Backdoor Learning on Images and Time Series6 Jan 2024
- 2023Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey14 Dec 2023
- 2023Two-in-One: A Model Hijacking Attack Against Text Generation Models12 May 2023
- 2023UNICORN: A Unified Backdoor Trigger Inversion Framework5 Apr 2023
- 2023Analyzing And Editing Inner Mechanisms Of Backdoored Language Models24 Feb 2023
- 2022Backdoor Vulnerabilities in Normally Trained Deep Learning Models29 Nov 2022
- 2022BppAttack: Stealthy and Efficient Trojan Attacks against Deep Neural Networks via Image Quantization and Contrastive Adversarial Learning26 May 2022
- 2021Dual-Key Multimodal Backdoors for Visual Question Answering14 Dec 2021
- 2021Grounding Representation Similarity with Statistical Testing3 Aug 2021
- 2021Can You Hear It? Backdoor Attacks via Ultrasonic Triggers30 Jul 2021
7 more
- 2021The Threat of Offensive AI to Organizations30 Jun 2021
- 2021Hidden Backdoors in Human-Centric Language Models1 May 2021
- 2021EX-RAY: Distinguishing Injected Backdoor from Natural Features in Neural Networks by Examining Differential Feature Symmetry16 Mar 2021
- 2021Oriole: Thwarting Privacy against Trustworthy Deep Learning Models23 Feb 2021
- 2021Backdoor Scanning for Deep Neural Networks through K-Arm Optimization9 Feb 2021
- 2021Quantifying and Mitigating Privacy Risks of Contrastive Learning8 Feb 2021
- 2021Red Alarm for Pre-trained Models: Universal Vulnerability to Neuron-Level Backdoor Attacks18 Jan 2021
- 2021Hidden Backdoors in Human-Centric Language Modelscited by 83
- 2021Quantifying and Mitigating Privacy Risks of Contrastive Learningcited by 35
- 2021Dual-Key Multimodal Backdoors for Visual Question Answeringcited by 35
- 2023Analyzing And Editing Inner Mechanisms Of Backdoored Language Modelscited by 22
- 2025Char-mander Use mBackdoor! A Study of Cross-lingual Backdoor Attacks in Multilingual LLMscited by 0
- 2025Char-mander Use mBackdoor! A Study of Cross-lingual Backdoor Attacks in Multilingual LLMs24 Feb 2025
- 2023Analyzing And Editing Inner Mechanisms Of Backdoored Language Models24 Feb 2023
- 2021Dual-Key Multimodal Backdoors for Visual Question Answering14 Dec 2021
- 2021Hidden Backdoors in Human-Centric Language Models1 May 2021
- 2021Quantifying and Mitigating Privacy Risks of Contrastive Learning8 Feb 2021
- 2021Backdoor Scanning for Deep Neural Networks through K-Arm Optimizationcited by 96
- 2022BppAttack: Stealthy and Efficient Trojan Attacks against Deep Neural Networks via Image Quantization and Contrastive Adversarial Learningcited by 82
- 2021Red Alarm for Pre-trained Models: Universal Vulnerability to Neuron-Level Backdoor Attackscited by 44
- 2023UNICORN: A Unified Backdoor Trigger Inversion Frameworkcited by 44
- 2021Can You Hear It? Backdoor Attacks via Ultrasonic Triggerscited by 41
- 2021The Threat of Offensive AI to Organizationscited by 37
- 2021Grounding Representation Similarity with Statistical Testingcited by 28
- 2023Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Surveycited by 17
- 2022Backdoor Vulnerabilities in Normally Trained Deep Learning Modelscited by 12
- 2023Two-in-One: A Model Hijacking Attack Against Text Generation Modelscited by 11
- 2021EX-RAY: Distinguishing Injected Backdoor from Natural Features in Neural Networks by Examining Differential Feature Symmetrycited by 5
- 2021Oriole: Thwarting Privacy against Trustworthy Deep Learning Modelscited by 2
12 most cited of 13 All 13 (JSON)
- 2024End-to-End Anti-Backdoor Learning on Images and Time Series6 Jan 2024
- 2023Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey14 Dec 2023
- 2023Two-in-One: A Model Hijacking Attack Against Text Generation Models12 May 2023
- 2023UNICORN: A Unified Backdoor Trigger Inversion Framework5 Apr 2023
- 2022Backdoor Vulnerabilities in Normally Trained Deep Learning Models29 Nov 2022
- 2022BppAttack: Stealthy and Efficient Trojan Attacks against Deep Neural Networks via Image Quantization and Contrastive Adversarial Learning26 May 2022
- 2021Grounding Representation Similarity with Statistical Testing3 Aug 2021
- 2021Can You Hear It? Backdoor Attacks via Ultrasonic Triggers30 Jul 2021
- 2021The Threat of Offensive AI to Organizations30 Jun 2021
- 2021EX-RAY: Distinguishing Injected Backdoor from Natural Features in Neural Networks by Examining Differential Feature Symmetry16 Mar 2021
- 2021Oriole: Thwarting Privacy against Trustworthy Deep Learning Models23 Feb 2021
- 2021Backdoor Scanning for Deep Neural Networks through K-Arm Optimization9 Feb 2021
12 newest of 13 All 13 (JSON)