Backdoor for Debias: Mitigating Model Bias with Backdoor Attack-based Artificial Bias
Not on the map. Why?
Abstract (arXiv)
With the swift advancement of deep learning, state-of-the-art algorithms have been utilized in various social situations. Nonetheless, some algorithms have been discovered to exhibit biases and provide unequal results. The current debiasing methods face challenges such as poor utilization of data or intricate training requirements. In this work, we found that the backdoor attack can construct an artificial bias similar to the model bias derived in standard training. Considering the strong adjustability of backdoor triggers, we are motivated to mitigate the model bias by carefully designing reverse artificial bias created from backdoor attack. Based on this, we propose a backdoor debiasing framework based on knowledge distillation, which effectively reduces the model bias from original data and minimizes security risks from the backdoor attack. The proposed solution is validated on both image and structured datasets, showing promising results. This work advances the understanding of backdoor attacks and highlights its potential for beneficial applications. The code for the study can be found at urlhttps://anonymous.4open.science/r/DwB-BC07/.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Builds on 36 of its 70 references that are in the map. First posted on arXiv 1 Mar 2023.
Builds on
36 of 70 references.
References · 36
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Adam: A Method for Stochastic Optimizationcited by 36,960
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,082
- 2015Distilling the Knowledge in a Neural Networkcited by 10,076
- 2014Deep Learning Face Attributes in the Wildcited by 3,679
- 2016Equality of Opportunity in Supervised Learningcited by 2,000
- 2014Unsupervised Domain Adaptation by Backpropagationcited by 1,906
- 2016Inception-v4, Inception-ResNet and the Impact of Residual Connections on Learningcited by 1,509
- 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,052
- 2018Generalized Cross Entropy Loss for Training Deep Neural Networks with Noisy Labelscited by 994
24 more
- 2018Mitigating Unwanted Biases with Adversarial Learningcited by 663
- 2018Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networkscited by 550
- 2021Just Train Twice: Improving Group Robustness without Training Group Informationcited by 522
- 2019STRIP: A Defence Against Trojan Attacks on Deep Neural Networkscited by 437
- 2017Age Progression/Regression by Conditional Adversarial Autoencodercited by 426
- 2020Backdoor Learning: A Surveycited by 412
- 2020Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networkscited by 341
- 2018AI Fairness 360: An Extensible Toolkit for Detecting, Understanding, and Mitigating Unwanted Algorithmic Biascited by 319
- 2017Fairness in Criminal Justice Risk Assessments: The State of the Artcited by 315
- 2019Label-Consistent Backdoor Attackscited by 285
- 2019Towards Fairness in Visual Recognition: Effective Strategies for Bias Mitigationcited by 252
- 2019A new Backdoor Attack in CNNs by training set corruption without label poisoningcited by 237
- 2021Rethinking the Backdoor Attacks' Triggers: A Frequency Perspectivecited by 155
- 2020Fair Attribute Classification through Latent Space De-biasingcited by 125
- 2021Fair Mixup: Fairness via Interpolationcited by 109
- 2020An Embarrassingly Simple Approach for Trojan Attack in Deep Neural Networkscited by 92
- 2018Achieving Fairness through Adversarial Learning: an Application to Recidivism Predictioncited by 77
- 2021Fairness via Representation Neutralizationcited by 63
- 2021Fair Feature Distillation for Visual Recognitioncited by 59
- 2020TrojanZoo: Towards Unified, Holistic, and Practical Evaluation of Neural Backdoorscited by 30
- 2020FairALM: Augmented Lagrangian Method for Training Fair Models with Little Regretcited by 22
- 2018Replication study: Development and validation of deep learning algorithm for detection of diabetic retinopathy in retinal fundus photographscited by 17
- 2022M-to-N Backdoor Paradigm: A Multi-Trigger and Multi-Target Attack to Deep Learning Modelscited by 5
- 2020Attribute-Induced Bias Eliminating for Transductive Zero-Shot Learningcited by 3
Built on by
Citing papers per year: 2024: 3.
3 papers.