Exploiting Backdoors of Face Synthesis Detection with Natural Triggers
Article No.: 51, Pages 1 - 24
Abstract
Deep neural networks have enhanced face synthesis detection in discriminating Artificial Intelligence Generated Content (AIGC). However, their security is threatened by the injection of carefully crafted triggers during model training (i.e., backdoor attacks). Although existing backdoor defenses and manual data selection are able to mitigate those using human-eye-sensitive triggers, such as patches or adversarial noises, the more challenging natural backdoor triggers remain insufficiently researched. To further investigate natural triggers, we propose a novel analysis-by-synthesis backdoor attack against face synthesis detection models, which embeds natural triggers in the latent space. We study such backdoor vulnerability from two perspectives: (1) Model Discrimination (Optimization-Based Trigger): we adopt a substitute detection model and find the trigger by minimizing the cross-entropy loss; (2) Data Distribution (Custom Trigger): we manipulate the uncommon facial attributes in the long-tailed distribution to generate poisoned samples without the supervision from detection models. Furthermore, to evaluate the detection models toward the latest AIGC, we utilize both the state-of-the-art StyleGAN and Stable Diffusion for trigger generation. Finally, these backdoor triggers introduce specific semantic features to the generated poisoned samples (e.g., skin textures and smile), which are more natural and robust. Extensive experiments show that our method is superior over existing pixel space backdoor attacks on three levels: (1) Attack Success Rate: achieving an attack success rate exceeding 99\(\%\), comparable to baseline methods, with less than 0.1\(\%\) model accuracy drop and under 3\(\%\) poisoning rate; (2) Backdoor Defense: showing superior robustness when faced with existing backdoor defenses (e.g., surpassing baseline methods by over 30\(\%\) after a 15\({}^{\circ}\) rotation); (3) Human Inspection: being less human-eye-sensitive from a user study with 46 participants and a collection of 2,300 data points.
References
[1]
Darius Afchar, Vincent Nozick, Junichi Yamagishi, and Isao Echizen. 2018. Mesonet: A Compact Facial Video Forgery Detection Network. In Proceedings of the 2018 IEEE International Workshop on Information Forensics and Security (WIFS). IEEE, 1–7.
[2]
Sajjad Ayoubi. 2021. FaceLib: Used for Face Detection, Facial Expression, AgeGender Estimation and Recognition with PyTorch. Retrieved from https://github.com/sajjjadayobi/FaceLib
[3]
Eugene Bagdasaryan, Andreas Veit, Yiqing Hua, Deborah Estrin, and Vitaly Shmatikov. 2020. How to Backdoor Federated Learning. In Proceedings of the 23rd International Conference on Artificial Intelligence and Statistics (AISTATS ’20), Online, Vol. 108. PMLR, 2938–2948.
[4]
Mauro Barni, Kassem Kallas, and Benedetta Tondi. 2019. A New Backdoor Attack in CNNS by Training Set Corruption without Label Poisoning. In Proceedings of the 2019 IEEE International Conference on Image Processing (ICIP ’19). IEEE, 101–105.
[5]
Junyi Cao, Chao Ma, Taiping Yao, Shen Chen, Shouhong Ding, and Xiaokang Yang. 2022. End-to-End Reconstruction-Classification Learning for Face Forgery Detection. In Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition, 4113–4122.
[6]
Xiaoyu Cao and Neil Zhenqiang Gong. 2021. Understanding the Security of Deepfake Detection. CoRR abs/2107.02045 (2021). arXiv: 2107.02045. Retrieved from https://arxiv.org/abs/2107.02045
[7]
Huili Chen, Cheng Fu, Jishen Zhao, and Farinaz Koushanfar. 2019. DeepInspect: A Black-box Trojan Detection and Mitigation Framework for Deep Neural Networks. In Proceedings of the 28th International Joint Conference on Artificial Intelligence (IJCAI ’19), 4658–4664.
[8]
Xinyun Chen, Chang Liu, Bo Li, Kimberly Lu, and Dawn Song. 2017. Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning. CoRR abs/1712.05526 (2017). arXiv: 1712.05526. Retrieved from http://arxiv.org/abs/1712.05526
[9]
François Chollet. 2017. Xception: Deep Learning with Depthwise Separable Convolutions. In Proceedings of the 2017 IEEE Conference on Computer Vision and Pattern Recognition (CVPR ’17). IEEE Computer Society, 1800–1807.
[10]
Hao Dang, Feng Liu, Joel Stehouwer, Xiaoming Liu, and Anil K. Jain. 2020. On the Detection of Digital Face Manipulation. In Proceedings of the 2020 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR ’20). Computer Vision Foundation / IEEE, 5780–5789.
[11]
Khoa D. Doan, Yingjie Lao, Weijie Zhao, and Ping Li. 2021. LIRA: Learnable, Imperceptible and Robust Backdoor Attacks. In Proceedings of the 2021 IEEE/CVF International Conference on Computer Vision (ICCV ’21). IEEE, 11946–11956.
[12]
Ricard Durall, Margret Keuper, and Janis Keuper. 2020. Watch Your Up-Convolution: CNN Based Generative Deep Neural Networks Are Failing To Reproduce Spectral Distributions. In Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition. 7890–7899.
[13]
Apurva Gandhi and Shomik Jain. 2020. Adversarial Perturbations Fool Deepfake Detectors. In Proceedings of the 2020 International Joint Conference on Neural Networks (IJCNN ’20). IEEE, 1–8.
[14]
Yansong Gao, Chang Xu, Derui Wang, Shiping Chen, Damith Chinthana Ranasinghe, and Surya Nepal. 2019. STRIP: A Defence against Trojan Attacks on Deep Neural Networks. In Proceedings of the 35th Annual Computer Security Applications Conference (ACSAC ’19). ACM, 113–125.
[15]
Shiming Ge, Fanzhao Lin, Chenyu Li, Daichi Zhang, Weiping Wang, and Dan Zeng. 2022. Deepfake Video Detection via Predictive Representation Learning. ACM Trans. Multimedia Comput. Commun. Appl. 18, 2s, Article 115 (Oct 2022), 21 pages.
[16]
S. Alireza Golestaneh, Saba Dadsetan, and Kris M. Kitani. 2022. No-Reference Image Quality Assessment via Transformers, Relative Ranking, and Self-Consistency. In Proceedings of the IEEE/CVF Winter Conference on Applications of Computer Vision (WACV). 1220–1230.
[17]
Ian J. Goodfellow, Jean Pouget-Abadie, Mehdi Mirza, Bing Xu, David Warde-Farley, Sherjil Ozair, Aaron C. Courville, and Yoshua Bengio. 2014. Generative Adversarial Nets. In Advances in Neural Information Processing Systems 27: Annual Conference on Neural Information Processing Systems. 2672–2680.
[18]
Diego Gragnaniello, Davide Cozzolino, Francesco Marra, Giovanni Poggi, and Luisa Verdoliva. 2021. Are GAN Generated Images Easy to Detect? A Critical Analysis of the State-Of-The-Art. In Proceedings of the 2021 IEEE International Conference on Multimedia and Expo (ICME ’21). IEEE, 1–6.
[19]
Tianyu Gu, Kang Liu, Brendan Dolan-Gavitt, and Siddharth Garg. 2019. BadNets: Evaluating Backdooring Attacks on Deep Neural Networks. IEEE Access 7 (2019), 47230–47244.
[20]
Kaiming He, Xiangyu Zhang, Shaoqing Ren, and Jian Sun. 2016. Deep Residual Learning for Image Recognition. In Proceedings of the 2016 IEEE Conference on Computer Vision and Pattern Recognition (CVPR ’16). IEEE Computer Society, 770–778.
[21]
Jonathan Ho, Ajay Jain, and Pieter Abbeel. 2020. Denoising Diffusion Probabilistic Models. In Advances in Neural Information Processing Systems 33: Annual Conference on Neural Information Processing Systems 2020 (NeurIPS ’20), virtual. 6840–6851.
[22]
Shehzeen Hussain, Paarth Neekhara, Malhar Jere, Farinaz Koushanfar, and Julian J. McAuley. 2021. Adversarial Deepfakes: Evaluating Vulnerability of Deepfake Detectors to Adversarial Examples. In Proceedings of the IEEE Winter Conference on Applications of Computer Vision (WACV ’21). IEEE, 3347–3356.
[23]
Farkhund Iqbal, Ahmed Abbasi, Abdul Rehman Javed, Ahmad Almadhor, Zunera Jalil, Sajid Anwar, and Imad Rida. 2023. Data Augmentation-based Novel Deep Learning Method for Deepfaked Images Detection. ACM Trans. Multimedia Comput. Commun. Appl. (2023). Just Accepted.
[24]
Shuai Jia, Chao Ma, Taiping Yao, Bangjie Yin, Shouhong Ding, and Xiaokang Yang. 2022. Exploring Frequency Adversarial Attacks for Face Forgery Detection. In Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR ’22). IEEE, 4093–4102.
[25]
Tero Karras, Timo Aila, Samuli Laine, and Jaakko Lehtinen. 2018. Progressive Growing of GANs for Improved Quality, Stability, and Variation. In Proceedings of the 6th International Conference on Learning Representations (ICLR ’18), OpenReview.net.
[26]
Tero Karras, Samuli Laine, and Timo Aila. 2019. A Style-Based Generator Architecture for Generative Adversarial Networks. In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR ’19). Computer Vision Foundation / IEEE, 4401–4410.
[27]
Diederik P. Kingma and Jimmy Ba. 2015. Adam: A Method for Stochastic Optimization. In Proceedings of the 3rd International Conference on Learning Representations (ICLR ’15).
[28]
Adrian Kristanto, Shuo Wang, and Carsten Rudolph. 2022. Latent Space-Based Backdoor Attacks Against Deep Neural Networks. In Proceedings of the International Joint Conference on Neural Networks (IJCNN ’22). IEEE, 1–10.
[29]
Dongze Li, Wei Wang, Hongxing Fan, and Jing Dong. 2021c. Exploring Adversarial Fake Images on Face Manifold. In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR ’21), virtual. Computer Vision Foundation / IEEE, 5789–5798.
[30]
Yuezun Li, Yiming Li, Baoyuan Wu, Longkang Li, Ran He, and Siwei Lyu. 2021a. Invisible Backdoor Attack with Sample-Specific Triggers. In Proceedings of the 2021 IEEE/CVF International Conference on Computer Vision (ICCV ’21). IEEE, 16443–16452.
[31]
Yige Li, Xixiang Lyu, Nodens Koren, Lingjuan Lyu, Bo Li, and Xingjun Ma. 2021b. Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks. In Proceedings of the 9th International Conference on Learning Representations (ICLR ’21), Virtual Event. OpenReview.net.
[32]
Yang Li, Songlin Yang, Wei Wang, and Jing Dong. 2024. SeFi-IDE: Semantic-Fidelity Identity Embedding for Personalized Diffusion-Based Generation. arXiv: 2402.00631.
[33]
Yiming Li, Tongqing Zhai, Baoyuan Wu, Yong Jiang, Zhifeng Li, and Shutao Xia. 2020. Rethinking the Trigger of Backdoor Attack. CoRR abs/2004.04692 (2020). arXiv: 2004.04692. Retrieved from https://arxiv.org/abs/2004.04692
[34]
Jiahao Liang, Huafeng Shi, and Weihong Deng. 2022. Exploring Disentangled Content Information for Face Forgery Detection. In Proceedings of the European Conference on Computer Vision. Springer, 128–145.
[35]
Junyu Lin, Lei Xu, Yingqi Liu, and Xiangyu Zhang. 2020. Composite Backdoor Attack for Deep Neural Network by Mixing Existing Benign Features. In Proceedings of the CCS ’20: 2020 ACM SIGSAC Conference on Computer and Communications Security, Virtual Event. ACM, 113–131. DOI:
[36]
Honggu Liu, Xiaodan Li, Wenbo Zhou, Yuefeng Chen, Yuan He, Hui Xue, Weiming Zhang, and Nenghai Yu. 2021. Spatial-phase shallow learning: rethinking face forgery detection in frequency domain. In Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition, 772–781.
[37]
Kang Liu, Brendan Dolan-Gavitt, and Siddharth Garg. 2018. Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks. In Research in Attacks, Intrusions, and Defenses - 21st International Symposium (RAID ’18), Proceedings, Lecture Notes in Computer Science, Vol. 11050, Springer, 273–294.
[38]
Yunfei Liu, Xingjun Ma, James Bailey, and Feng Lu. 2020. Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networks. In Computer Vision - ECCV 2020 - 16th European Conference, Proceedings, Part X, Lecture Notes in Computer Science, Vol. 12355, Springer, 182–199.
[39]
Ziwei Liu, Ping Luo, Xiaogang Wang, and Xiaoou Tang. 2015. Deep Learning Face Attributes in the Wild. In Proceedings of International Conference on Computer Vision (ICCV). 3730–3738.
[40]
Yuchen Luo, Yong Zhang, Junchi Yan, and Wei Liu. 2021. Generalizing Face Forgery Detection with High-Frequency Features. In Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition. 16317–16326.
[41]
Ningning Ma, Xiangyu Zhang, Hai-Tao Zheng, and Jian Sun. 2018. ShuffleNet V2: Practical Guidelines for Efficient CNN Architecture Design. In Computer Vision - ECCV 2018 - 15th European Conference, Proceedings, Part XIV, Lecture Notes in Computer Science, Vol. 11218, Springer, 122–138.
[42]
Seyed-Mohsen Moosavi-Dezfooli, Alhussein Fawzi, Omar Fawzi, and Pascal Frossard. 2017. Universal Adversarial Perturbations. In 2017 IEEE Conference on Computer Vision and Pattern Recognition (CVPR ’17). IEEE Computer Society, 86–94.
[43]
Seyed-Mohsen Moosavi-Dezfooli, Alhussein Fawzi, and Pascal Frossard. 2016. DeepFool: A Simple and Accurate Method to Fool Deep Neural Networks. In 2016 IEEE Conference on Computer Vision and Pattern Recognition (CVPR ’16). IEEE Computer Society, 2574–2582.
[44]
Paarth Neekhara, Brian Dolhansky, Joanna Bitton, and Cristian Canton-Ferrer. 2021. Adversarial Threats to DeepFake Detection: A Practical Perspective. In IEEE Conference on Computer Vision and Pattern Recognition Workshops, CVPR Workshops 2021, virtual. Computer Vision Foundation / IEEE, 923–932.
[45]
Huy H Nguyen, Fuming Fang, Junichi Yamagishi, and Isao Echizen. 2019a. Multi-task learning for detecting and segmenting manipulated facial images and videos. In 2019 IEEE 10th International Conference on Biometrics Theory, Applications and Systems (BTAS). IEEE, 1–8.
[46]
Huy H. Nguyen, Junichi Yamagishi, and Isao Echizen. 2019b. Capsule-Forensics: Using Capsule Networks to Detect Forged Images and Videos. In ICASSP 2019–2019 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP). IEEE, 2307–2311.
[47]
Tuan Anh Nguyen and Anh Tuan Tran. 2020. Input-Aware Dynamic Backdoor Attack. In Advances in Neural Information Processing Systems 33: Annual Conference on Neural Information Processing Systems 2020 (NeurIPS ’20), virtual. 3454–3464.
[48]
Tuan Anh Nguyen and Anh Tuan Tran. 2021. WaNet - Imperceptible Warping-based Backdoor Attack. In 9th International Conference on Learning Representations (ICLR ’21), Virtual Event. OpenReview.net.
[49]
Lorenzo Papa, Lorenzo Faiella, Luca Corvitto, Luca Maiano, and Irene Amerini. 2023. On the Use of Stable Diffusion for Creating Realistic Faces: From Generation to Detection. In 11th International Workshop on Biometrics and Forensics (IWBF ’23). IEEE, 1–6.
[50]
Rishubh Parihar, Ankit Dhiman, Tejan Karmali, and Venkatesh R. 2022. Everything Is There in Latent Space: Attribute Editing and Attribute Style Manipulation by StyleGAN Latent Space Exploration. In MM ’22: The 30th ACM International Conference on Multimedia. ACM, 1828–1836.
[51]
Bo Peng, Hongxing Fan, Wei Wang, Jing Dong, and Siwei Lyu. 2021. A Unified Framework for High Fidelity Face Swap and Expression Reenactment. IEEE Transactions on Circuits and Systems for Video Technology 32, 6 (2021), 3673–3684.
[52]
Yuyang Qian, Guojun Yin, Lu Sheng, Zixuan Chen, and Jing Shao. 2020. Thinking in Frequency: Face Forgery Detection by Mining Frequency-Aware Clues. In European Conference on Computer Vision. Springer, 86–103.
[53]
Robin Rombach, Andreas Blattmann, Dominik Lorenz, Patrick Esser, and Björn Ommer. 2022. High-Resolution Image Synthesis with Latent Diffusion Models. In IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR ’22). IEEE, 10674–10685.
[54]
Andreas Rossler, Davide Cozzolino, Luisa Verdoliva, Christian Riess, Justus Thies, and Matthias Nießner. 2019. Faceforensics++: Learning to Detect Manipulated Facial Images. In Proceedings of the IEEE/CVF International Conference on Computer Vision. 1–11.
[55]
Leonid I. Rudin, S. Osher, and Emad Fatemi. 1992. Nonlinear Total Variation Based Noise Removal Algorithms. Physica D: Nonlinear Phenomena 60 (1992), 259–268.
[56]
Ahmed Salem, Rui Wen, Michael Backes, Shiqing Ma, and Yang Zhang. 2022. Dynamic Backdoor Attacks Against Machine Learning Models. In 7th IEEE European Symposium on Security and Privacy, EuroS & P 2022. IEEE, 703–718.
[57]
Esha Sarkar, Hadjer Benkraouda, Gopika Krishnan, Homer Gamil, and Michail Maniatakos. 2022. FaceHack: Attacking Facial Recognition Systems Using Malicious Facial Characteristics. IEEE Trans. Biom. Behav. Identity Sci. 4, 3 (2022), 361–372.
[58]
Ramprasaath R. Selvaraju, Abhishek Das, Ramakrishna Vedantam, Michael Cogswell, Devi Parikh, and Dhruv Batra. 2016. Grad-CAM: Visual Explanations from Deep Networks via Gradient-Based Localization. International Journal of Computer Vision 128 (2016), 336–359.
[59]
Yujun Shen, Jinjin Gu, Xiaoou Tang, and Bolei Zhou. 2020. Interpreting the Latent Space of GANs for Semantic Face Editing. In 2020 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR ’20). Computer Vision Foundation / IEEE, 9240–9249.
[60]
Karen Simonyan and Andrew Zisserman. 2015. Very Deep Convolutional Networks for Large-Scale Image Recognition. In 3rd International Conference on Learning Representations (ICLR ’15), Conference Track Proceedings.
[61]
Mingxing Tan and Quoc V. Le. 2019. EfficientNet: Rethinking Model Scaling for Convolutional Neural Networks. In Proceedings of the 36th International Conference on Machine Learning (ICML ’19), Proceedings of Machine Learning Research, Vol. 97. PMLR, 6105–6114.
[62]
Ruben Tolosana, Ruben Vera-Rodriguez, Julian Fierrez, Aythami Morales, and Javier Ortega-Garcia. 2020. Deepfakes and Beyond: A Survey of Face Manipulation and Fake Detection. Information Fusion 64 (2020), 131–148.
[63]
Bolun Wang, Yuanshun Yao, Shawn Shan, Huiying Li, Bimal Viswanath, Haitao Zheng, and Ben Y. Zhao. 2019. Neural Cleanse: Identifying and Mitigating Backdoor Attacks in Neural Networks. In 2019 IEEE Symposium on Security and Privacy (SP ’19). IEEE, 707–723.
[64]
Chengrui Wang and Weihong Deng. 2021. Representative forgery mining for fake face detection. In Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition. 14923–14932.
[65]
Sheng-Yu Wang, Oliver Wang, Richard Zhang, Andrew Owens, and Alexei A. Efros. 2020. CNN-Generated Images Are Surprisingly Easy to Spot… for Now. In 2020 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR ’20). Computer Vision Foundation/IEEE, 8692–8701.
[66]
Tianyi Wang, Harry Cheng, Kam Pui Chow, and Liqiang Nie. 2023. Deep Convolutional Pooling Transformer for Deepfake Detection. ACM Trans. Multimedia Comput. Commun. Appl. 19, 6, Article 179 (May 2023), 20 pages.
[67]
Qiucheng Wu, Yujian Liu, Handong Zhao, Ajinkya Kale, Trung Bui, Tong Yu, Zhe Lin, Yang Zhang, and Shiyu Chang. 2023. Uncovering the Disentanglement Capability in Text-to-Image Diffusion Models. In IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR ’23). IEEE, 1900–1910.
[68]
Songlin Yang, Wei Wang, Yushi Lan, Xiangyu Fan, Bo Peng, Lei Yang, and Jing Dong. 2024. Learning Dense Correspondence for Nnerf-Based Face Reenactment. In Proceedings of the AAAI Conference on Artificial Intelligence, Vol. 38. 6522–6530.
[69]
Songlin Yang, Wei Wang, Jun Ling, Bo Peng, Xu Tan, and Jing Dong. 2023a. Context-Aware Talking-Head Video Editing. In Proceedings of the 31st ACM International Conference on Multimedia. 7718–7727.
[70]
Songlin Yang, Wei Wang, Bo Peng, and Jing Dong. 2023b. Designing A 3d-Aware Stylenerf Encoder for Face Editing. In ICASSP 2023–2023 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP). IEEE, 1–5.
[71]
Zhenqiang Ying, Haoran Niu, Praful Gupta, Dhruv Mahajan, Deepti Ghadiyaram, and Alan Bovik. 2020. From Patches to Pictures (PaQ-2-PiQ): Mapping the Perceptual Space of Picture Quality. In Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR).
[72]
Yang Yu, Rongrong Ni, Wenjie Li, and Yao Zhao. 2022. Detection of AI-Manipulated Fake Faces via Mining Generalized Features. ACM Trans. Multimedia Comput. Commun. Appl. 18, 4, Article 94 (Mar 2022), 23 pages.
[73]
Kaipeng Zhang, Zhanpeng Zhang, Zhifeng Li, and Yu Qiao. 2016. Joint Face Detection and Alignment Using Multitask Cascaded Convolutional Networks. IEEE Signal Processing Letters 23 (2016), 1499–1503.
[74]
Jing Zhao, Hongwei Yang, Hui He, Jie Peng, Weizhe Zhang, Jiangqun Ni, Arun Kumar Sangaiah, and Aniello Castiglione. 2024. Backdoor Two-Stream Video Models on Federated Learning. ACM Trans. Multimedia Comput. Commun. Appl. (Mar 2024). Just Accepted.
[75]
Haoti Zhong, Cong Liao, Anna Cinzia Squicciarini, Sencun Zhu, and David J. Miller. 2020. Backdoor Embedding in Convolutional Neural Network Models via Invisible Perturbation. In CODASPY ’20: Tenth ACM Conference on Data and Application Security and Privacy. ACM, 97–108.
[76]
zllrunning. 2019. face-parsing.PyTorch. Using modified BiSeNet for face parsing in PyTorch. Retrieved from https://github.com/zllrunning/face-parsing.PyTorch
Index Terms
- Exploiting Backdoors of Face Synthesis Detection with Natural Triggers
Recommendations
Embedding Backdoors as the Facial Features: Invisible Backdoor Attacks Against Face Recognition Systems
ACM TURC '20: Proceedings of the ACM Turing Celebration Conference - ChinaDeep neural network (DNN) based face recognition systems have been widely applied in various identity authentication scenarios. However, recent studies show that the DNN models are vulnerable to backdoor attacks. An attacker can embed backdoors into the ...
The triggers that open the NLP model backdoors are hidden in the adversarial samples
AbstractDeep neural networks (DNNS) have been proven to be vulnerable to adversarial attacks. But the adversarial perturbations are generated for specific input samples, and the perturbations of one sample cannot be applied to other samples. ...
Natural Backdoor Attacks on Speech Recognition Models
Machine Learning for Cyber SecurityAbstractWith the rapid development of deep learning, its vulnerability has gradually emerged in recent years. This work focuses on backdoor attacks on speech recognition systems. We adopt sounds that are ordinary in nature or in our daily life as triggers ...
Comments
Please enable JavaScript to view thecomments powered by Disqus.Information & Contributors
Information
Published In
February 2025
651 pages
Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than the author(s) must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected].
Publisher
Association for Computing Machinery
New York, NY, United States
Publication History
Published: 25 December 2024
Online AM: 11 July 2024
Accepted: 01 July 2024
Revised: 27 May 2024
Received: 31 December 2023
Published in TOMM Volume 21, Issue 2
Check for updates
Author Tags
Qualifiers
- Research-article
Funding Sources
- National Natural Science Foundation of China
Contributors
Other Metrics
Bibliometrics & Citations
Bibliometrics
Article Metrics
- 0Total Citations
- 350Total Downloads
- Downloads (Last 12 months)350
- Downloads (Last 6 weeks)45
Reflects downloads up to 03 Mar 2025
Other Metrics
Citations
View Options
Login options
Check if you have access through your login credentials or your institution to get full access on this article.
Sign in