mlsanityData to 7 Oct 2026

Backdoor for Debias: Mitigating Model Bias with Backdoor Attack-based Artificial Bias

arXiv 2303.01504 ↗First posted 1 Mar 2023cs.LG cs.AI cs.CYcited by 3

Not on the map. Why?

Abstract (arXiv)

With the swift advancement of deep learning, state-of-the-art algorithms have been utilized in various social situations. Nonetheless, some algorithms have been discovered to exhibit biases and provide unequal results. The current debiasing methods face challenges such as poor utilization of data or intricate training requirements. In this work, we found that the backdoor attack can construct an artificial bias similar to the model bias derived in standard training. Considering the strong adjustability of backdoor triggers, we are motivated to mitigate the model bias by carefully designing reverse artificial bias created from backdoor attack. Based on this, we propose a backdoor debiasing framework based on knowledge distillation, which effectively reduces the model bias from original data and minimizes security risks from the backdoor attack. The proposed solution is validated on both image and structured datasets, showing promising results. This work advances the understanding of backdoor attacks and highlights its potential for beneficial applications. The code for the study can be found at urlhttps://anonymous.4open.science/r/DwB-BC07/.

Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Builds on 36 of its 70 references that are in the map. First posted on arXiv 1 Mar 2023.

Builds on

36 of 70 references.

References · 36

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2014Adam: A Method for Stochastic Optimizationcited by 36,960
  3. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
  4. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
  5. 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,082
  6. 2015Distilling the Knowledge in a Neural Networkcited by 10,076
  7. 2014Deep Learning Face Attributes in the Wildcited by 3,679
  8. 2016Equality of Opportunity in Supervised Learningcited by 2,000
  9. 2014Unsupervised Domain Adaptation by Backpropagationcited by 1,906
  10. 2016Inception-v4, Inception-ResNet and the Impact of Residual Connections on Learningcited by 1,509
  11. 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,052
  12. 2018Generalized Cross Entropy Loss for Training Deep Neural Networks with Noisy Labelscited by 994
24 more
  1. 2018Mitigating Unwanted Biases with Adversarial Learningcited by 663
  2. 2018Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networkscited by 550
  3. 2021Just Train Twice: Improving Group Robustness without Training Group Informationcited by 522
  4. 2019STRIP: A Defence Against Trojan Attacks on Deep Neural Networkscited by 437
  5. 2017Age Progression/Regression by Conditional Adversarial Autoencodercited by 426
  6. 2020Backdoor Learning: A Surveycited by 412
  7. 2020Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networkscited by 341
  8. 2018AI Fairness 360: An Extensible Toolkit for Detecting, Understanding, and Mitigating Unwanted Algorithmic Biascited by 319
  9. 2017Fairness in Criminal Justice Risk Assessments: The State of the Artcited by 315
  10. 2019Label-Consistent Backdoor Attackscited by 285
  11. 2019Towards Fairness in Visual Recognition: Effective Strategies for Bias Mitigationcited by 252
  12. 2019A new Backdoor Attack in CNNs by training set corruption without label poisoningcited by 237
  13. 2021Rethinking the Backdoor Attacks' Triggers: A Frequency Perspectivecited by 155
  14. 2020Fair Attribute Classification through Latent Space De-biasingcited by 125
  15. 2021Fair Mixup: Fairness via Interpolationcited by 109
  16. 2020An Embarrassingly Simple Approach for Trojan Attack in Deep Neural Networkscited by 92
  17. 2018Achieving Fairness through Adversarial Learning: an Application to Recidivism Predictioncited by 77
  18. 2021Fairness via Representation Neutralizationcited by 63
  19. 2021Fair Feature Distillation for Visual Recognitioncited by 59
  20. 2020TrojanZoo: Towards Unified, Holistic, and Practical Evaluation of Neural Backdoorscited by 30
  21. 2020FairALM: Augmented Lagrangian Method for Training Fair Models with Little Regretcited by 22
  22. 2018Replication study: Development and validation of deep learning algorithm for detection of diabetic retinopathy in retinal fundus photographscited by 17
  23. 2022M-to-N Backdoor Paradigm: A Multi-Trigger and Multi-Target Attack to Deep Learning Modelscited by 5
  24. 2020Attribute-Induced Bias Eliminating for Transductive Zero-Shot Learningcited by 3

Built on by

Cited by year

Citing papers per year: 2024: 3.

3 papers.