BadSAD: Clean-Label Backdoor Attacks against Deep Semi-Supervised Anomaly Detection
Not on the map. Why?
Abstract (arXiv)
Image anomaly detection (IAD) is essential in applications such as industrial inspection, medical imaging, and security. Despite the progress achieved with deep learning models like Deep Semi-Supervised Anomaly Detection (DeepSAD), these models remain susceptible to backdoor attacks, presenting significant security challenges. In this paper, we introduce BadSAD, a novel backdoor attack framework specifically designed to target DeepSAD models. Our approach involves two key phases: trigger injection, where subtle triggers are embedded into normal images, and latent space manipulation, which positions and clusters the poisoned images near normal images to make the triggers appear benign. Extensive experiments on benchmark datasets validate the effectiveness of our attack strategy, highlighting the severe risks that backdoor attacks pose to deep learning-based anomaly detection systems.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 21 of its 33 references that are in the map. First posted on arXiv 17 Dec 2024.
Builds on
21 of 33 references.
References · 21
- 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,283
- 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,052
- 2017Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoningcited by 1,012
- 2021Towards Total Recall in Industrial Anomaly Detectioncited by 772
- 2020A Unifying Review of Deep and Shallow Anomaly Detectioncited by 423
- 2020Backdoor Learning: A Surveycited by 412
- 2018GANomaly: Semi-Supervised Anomaly Detection via Adversarial Trainingcited by 409
- 2020Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networkscited by 341
- 2020Invisible Backdoor Attack with Sample-Specific Triggerscited by 338
- 2019Deep Semi-Supervised Anomaly Detectioncited by 290
- 2022Diffusion Models for Medical Anomaly Detectioncited by 231
- 2018Adversarially Learned One-Class Classifier for Novelty Detectioncited by 202
9 more
- 2020Deep Learning for Anomaly Detection: A Reviewcited by 159
- 2023Deep Industrial Image Anomaly Detection: A Surveycited by 147
- 2020Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Reviewcited by 120
- 2018Object-centric Auto-encoders and Dummy Anomalies for Abnormal Event Detection in Videocited by 110
- 2022Narcissus: A Practical Clean-Label Backdoor Attack with Limited Informationcited by 102
- 2024A Survey on Visual Anomaly Detection: Challenge, Approach, and Prospectcited by 69
- 2021Poison Ink: Robust and Invisible Backdoor Attackcited by 50
- 2024Supervised Anomaly Detection for Complex Industrial Imagescited by 18
- 2024Backdoor Attack against One-Class Sequential Anomaly Detection Modelscited by 1
Built on by
Not cited yet.