Event Trojan: Asynchronous Event-based Backdoor Attacks
Not on the map. Why?
Abstract (arXiv)
As asynchronous event data is more frequently engaged in various vision tasks, the risk of backdoor attacks becomes more evident. However, research into the potential risk associated with backdoor attacks in asynchronous event data has been scarce, leaving related tasks vulnerable to potential threats. This paper has uncovered the possibility of directly poisoning event data streams by proposing Event Trojan framework, including two kinds of triggers, i.e., immutable and mutable triggers. Specifically, our two types of event triggers are based on a sequence of simulated event spikes, which can be easily incorporated into any event stream to initiate backdoor attacks. Additionally, for the mutable trigger, we design an adaptive learning mechanism to maximize its aggressiveness. To improve the stealthiness, we introduce a novel loss function that constrains the generated contents of mutable triggers, minimizing the difference between triggers and original events while maintaining effectiveness. Extensive experiments on public event datasets show the effectiveness of the proposed backdoor triggers. We hope that this paper can draw greater attention to the potential threats posed by backdoor attacks on event-based tasks. Our code is available at https://github.com/rfww/EventTrojan.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Builds on 45 of its 56 references that are in the map. First posted on arXiv 9 Jul 2024.
Builds on
45 of 56 references.
References · 45
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,082
- 2019EfficientNet: Rethinking Model Scaling for Convolutional Neural Networkscited by 6,415
- 2015Rethinking the Inception Architecture for Computer Visioncited by 5,451
- 2020Training data-efficient image transformers & distillation through attentioncited by 4,560
- 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,052
- 2017Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoningcited by 1,012
- 2019Event-based Vision: A Surveycited by 1,010
- 2020Backdoor Learning: A Surveycited by 412
- 2019High Speed and High Dynamic Range Video with an Event Cameracited by 344
33 more
- 2020Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networkscited by 341
- 2020Invisible Backdoor Attack with Sample-Specific Triggerscited by 338
- 2015Converting Static Image Datasets to Spiking Neuromorphic Datasets Using Saccadescited by 308
- 2018Unsupervised Event-based Learning of Optical Flow, Depth, and Egomotioncited by 304
- 2019End-to-End Learning of Representations for Asynchronous Event-Based Datacited by 216
- 2018HATS: Histograms of Averaged Time Surfaces for Robust Event-based Object Classificationcited by 215
- 2018Event-based Vision meets Deep Learning on Steering Prediction for Self-driving Carscited by 197
- 2019Events-to-Video: Bringing Modern Computer Vision to Event Camerascited by 191
- 2020Learning to Detect Objects with a 1 Megapixel Event Cameracited by 184
- 2020Clean-Label Backdoor Attacks on Video Recognition Modelscited by 162
- 2020Backdoor Attacks Against Deep Learning Systems in the Physical Worldcited by 129
- 2022AEGNN: Asynchronous Event-based Graph Neural Networkscited by 118
- 2018EV-SegNet: Semantic Segmentation for Event-based Camerascited by 92
- 2022Secrets of Event-Based Optical Flowcited by 92
- 2020Learning Event-Based Motion Deblurringcited by 81
- 2022ESS: Learning Event-based Semantic Segmentation from Still Imagescited by 81
- 2019Event-Based Motion Segmentation by Motion Compensationcited by 78
- 2021FIBA: Frequency-Injection based Backdoor Attack in Medical Image Analysiscited by 60
- 2023From Chaos Comes Order: Ordering Event Representations for Object Recognition and Detectioncited by 52
- 2015HFirst: A Temporal Approach to Object Recognitioncited by 50
- 2021Poison Ink: Robust and Invisible Backdoor Attackcited by 50
- 2022BadDet: Backdoor Attacks on Object Detectioncited by 45
- 2021Can You Hear It? Backdoor Attacks via Ultrasonic Triggerscited by 41
- 2023Backdoor Attacks Against Deep Image Compression via Adaptive Frequency Triggercited by 40
- 2023Neural Polarizer: A Lightweight and Effective Backdoor Defense via Purifying Poisoned Featurescited by 35
- 2021PointBA: Towards Backdoor Attacks in 3D Point Cloudcited by 34
- 2022Ev-TTA: Test-Time Adaptation for Event-Based Object Recognitioncited by 26
- 2021Learning from Event Cameras with Sparse Spiking Convolutional Neural Networkscited by 25
- 2021EventPoint: Self-Supervised Interest Point Detection and Description for Event-based Cameracited by 24
- 2023Neuromorphic Event-based Facial Expression Recognitioncited by 18
- 2022A Survey on Backdoor Attack and Defense in Natural Language Processingcited by 13
- 2022Backdoor Attacks on Bayesian Neural Networks using Reverse Distributioncited by 3
- 2023Steganography for Neural Radiance Fields by Backdooringcited by 3
Built on by
Citing papers per year: 2024: 2; 2025: 1.
3 papers.