mlsanityData to 7 Oct 2026

DFB: A Data-Free, Low-Budget, and High-Efficacy Clean-Label Backdoor Attack

arXiv 2308.09487 ↗First posted 18 Aug 2023cs.CR cs.AIcited by 0

Not on the map. Why?

Abstract (arXiv)

In the domain of backdoor attacks, accurate labeling of injected data is essential for evading rudimentary detection mechanisms. This imperative has catalyzed the development of clean-label attacks, which are notably more elusive as they preserve the original labels of the injected data. Current clean-label attack methodologies primarily depend on extensive knowledge of the training dataset. However, practically, such comprehensive dataset access is often unattainable, given that training datasets are typically compiled from various independent sources. Departing from conventional clean-label attack methodologies, our research introduces DFB, a data-free, low-budget, and high-efficacy clean-label backdoor Attack. DFB is unique in its independence from training data access, requiring solely the knowledge of a specific target class. Tested on CIFAR10, Tiny-ImageNet, and TSRD, DFB demonstrates remarkable efficacy with minimal poisoning rates of just 0.1%, 0.025%, and 0.4%, respectively. These rates are significantly lower than those required by existing methods such as LC, HTBA, BadNets, and Blend, yet DFB achieves superior attack success rates. Furthermore, our findings reveal that DFB poses a formidable challenge to four established backdoor defense algorithms, indicating its potential as a robust tool in advanced clean-label attack strategies.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 29 of its 54 references that are in the map. First posted on arXiv 18 Aug 2023.

Builds on

29 of 54 references.

References · 29

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
  3. 2020Language Models are Few-Shot Learnerscited by 32,199
  4. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
  5. 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
  6. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
  7. 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
  8. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  9. 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
  10. 2019EfficientNet: Rethinking Model Scaling for Convolutional Neural Networkscited by 6,415
  11. 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,052
  12. 2017Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoningcited by 1,012
17 more
  1. 2016Adversarial Machine Learning at Scalecited by 934
  2. 2017Mastering Chess and Shogi by Self-Play with a General Reinforcement Learning Algorithmcited by 723
  3. 2018Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networkscited by 550
  4. 2019STRIP: A Defence Against Trojan Attacks on Deep Neural Networkscited by 437
  5. 2019Hidden Trigger Backdoor Attackscited by 359
  6. 2020Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networkscited by 341
  7. 2020Invisible Backdoor Attack with Sample-Specific Triggerscited by 338
  8. 2020Input-Aware Dynamic Backdoor Attackcited by 304
  9. 2019Label-Consistent Backdoor Attackscited by 285
  10. 2018SentiNet: Detecting Localized Universal Attacks Against Deep Learning Systemscited by 148
  11. 2022Narcissus: A Practical Clean-Label Backdoor Attack with Limited Informationcited by 102
  12. 2020Practical Detection of Trojan Neural Networks: Data-Limited and Data-Free Casescited by 93
  13. 2019Defending Neural Backdoors via Generative Distribution Modelingcited by 82
  14. 2019Adapt or Get Left Behind: Domain Adaptation through BERT Language Model Finetuning for Aspect-Target Sentiment Classificationcited by 62
  15. 2020Defending against Backdoor Attack on Deep Neural Networkscited by 22
  16. 2020FaceHack: Triggering backdoored facial recognition systems using facial characteristicscited by 19
  17. 2020Golden Grain: Building a Secure and Decentralized Model Marketplace for MLaaScited by 6

Built on by

Not cited yet.