mlsanityData to 14 Oct 2026

TRAPDOOR: Repurposing backdoors to detect dataset bias in machine learning-based genomic analysis

arXiv 2108.10132 ↗First posted 14 Aug 2021cs.LG cs.AIcited by 2

Not on the map. Why?

Abstract (arXiv)

Machine Learning (ML) has achieved unprecedented performance in several applications including image, speech, text, and data analysis. Use of ML to understand underlying patterns in gene mutations (genomics) has far-reaching results, not only in overcoming diagnostic pitfalls, but also in designing treatments for life-threatening diseases like cancer. Success and sustainability of ML algorithms depends on the quality and diversity of data collected and used for training. Under-representation of groups (ethnic groups, gender groups, etc.) in such a dataset can lead to inaccurate predictions for certain groups, which can further exacerbate systemic discrimination issues. In this work, we propose TRAPDOOR, a methodology for identification of biased datasets by repurposing a technique that has been mostly proposed for nefarious purposes: Neural network backdoors. We consider a typical collaborative learning setting of the genomics supply chain, where data may come from hospitals, collaborative projects, or research institutes to a central cloud without awareness of bias against a sensitive group. In this context, we develop a methodology to leak potential bias information of the collective data without hampering the genuine performance using ML backdooring catered for genomic applications. Using a real-world cancer dataset, we analyze the dataset with the bias that already existed towards white individuals and also introduced biases in datasets artificially, and our experimental result show that TRAPDOOR can detect the presence of dataset bias with 100% accuracy, and furthermore can also extract the extent of bias by recovering the percentage with a small error.

Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 21 of its 61 references that are in the map. First posted on arXiv 14 Aug 2021.

Builds on

21 of 61 references.

References · 21

  1. 2019A Survey on Bias and Fairness in Machine Learningcited by 1,917
  2. 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,106
  3. 2017Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoningcited by 1,055
  4. 2018Spectral Signatures in Backdoor Attackscited by 484
  5. 2018Detecting Backdoor Attacks on Deep Neural Networks by Activation Clusteringcited by 456
  6. 2020Backdoor Learning: A Surveycited by 426
  7. 2019Hidden Trigger Backdoor Attackscited by 371
  8. 2018Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooringcited by 357
  9. 2019Detecting AI Trojans Using Meta Neural Analysiscited by 199
  10. 2020Blind Backdoors in Deep Learning Modelscited by 182
  11. 2017Machine Learning Models that Remember Too Muchcited by 169
  12. 2020Dynamic Backdoor Attacks Against Machine Learning Modelscited by 151
9 more
  1. 2018Backdoor Embedding in Convolutional Neural Network Models via Invisible Perturbationcited by 134
  2. 2019Demon in the Variant: Statistical Analysis of DNNs for Robust Backdoor Contamination Detectioncited by 124
  3. 2020Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Reviewcited by 123
  4. 2020Towards Probabilistic Verification of Machine Unlearningcited by 50
  5. 2019Gotta Catch 'Em All: Using Honeypots to Catch Adversarial Attacks on Neural Networkscited by 40
  6. 2020What Do You See? Evaluation of Explainable Artificial Intelligence (XAI) Interpretability through Neural Backdoorscited by 32
  7. 2019TrojDRL: Trojan Attacks on Deep Reinforcement Learning Agentscited by 30
  8. 2020FaceHack: Triggering backdoored facial recognition systems using facial characteristicscited by 20
  9. 2021Machine Learning with Electronic Health Records is vulnerable to Backdoor Trigger Attackscited by 4

Built on by

Cited by year

Citing papers per year: 2023: 1; 2024: 1.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2023Backdoor for Debias: Mitigating Model Bias with Backdoor Attack-based Artificial Bias
  2. 2026Lilith: Backdoor Generalization under Training-Inference Trigger Shift
  3. 2021Incompatibility Clustering as a Defense Against Backdoor Poisoning Attacks
  4. 2023Backdoor Attacks Against Dataset Distillation
  5. 2026ProtegoFed: Backdoor-Free Federated Instruction Tuning with Interspersed Poisoned Data
  6. 2021On Utility and Privacy in Synthetic Genomic Data
  7. 2022PROVGEN: A Privacy-Preserving Approach for Outcome Validation in Genomic Research ↗
  8. 2024Backdoor Secrets Unveiled: Identifying Backdoor Data with Optimized Scaled Prediction Consistency