• Complex
  • Title
  • Keyword
  • Abstract
  • Scholars
  • Journal
  • ISSN
  • Conference
成果搜索

author:

Liu, Yang (Liu, Yang.) [1] | Fan, Mingyuan (Fan, Mingyuan.) [2] | Chen, Cen (Chen, Cen.) [3] | Liu, Ximeng (Liu, Ximeng.) [4] | Ma, Zhuo (Ma, Zhuo.) [5] | Wang, Li (Wang, Li.) [6] | Ma, Jianfeng (Ma, Jianfeng.) [7]

Indexed by:

EI

Abstract:

Backdoor injection attack is an emerging threat to the security of neural networks, however, there still exist limited effective defense methods against the attack. In this paper, we propose BAERASER, a novel method that can erase the backdoor injected into the victim model through machine unlearning. Specifically, BAERASER mainly implements backdoor defense in two key steps. First, trigger pattern recovery is conducted to extract the trigger patterns infected by the victim model. Here, the trigger pattern recovery problem is equivalent to the one of extracting an unknown noise distribution from the victim model, which can be easily resolved by the entropy maximization based generative model. Subsequently, BAERASER leverages these recovered trigger patterns to reverse the backdoor injection procedure and induce the victim model to erase the polluted memories through a newly designed gradient ascent based machine unlearning method. Compared with the previous machine unlearning solutions, the proposed approach gets rid of the reliance on the full access to training data for retraining and shows higher effectiveness on backdoor erasing than existing fine-tuning or pruning methods. Moreover, experiments show that BAERASER can averagely lower the attack success rates of three kinds of state-of-the-art backdoor attacks by 99% on four benchmark datasets. © 2022 IEEE.

Keyword:

Network security Recovery

Community:

  • [ 1 ] [Liu, Yang]State Key Laboratory of Integrated Services Networks (ISN)
  • [ 2 ] [Liu, Yang]Xidian University, Shaanxi Key Laboratory of Network and System Security, Xi'an, China
  • [ 3 ] [Fan, Mingyuan]Fuzhou University, College of Computer and Data Science, Fuzhou, China
  • [ 4 ] [Chen, Cen]East China Normal University, School of Data Science and Engineering, Shanghai, China
  • [ 5 ] [Liu, Ximeng]Fuzhou University, College of Computer and Data Science, Fuzhou, China
  • [ 6 ] [Ma, Zhuo]State Key Laboratory of Integrated Services Networks (ISN)
  • [ 7 ] [Wang, Li]Ant Group, Hangzhou, China
  • [ 8 ] [Ma, Jianfeng]State Key Laboratory of Integrated Services Networks (ISN)
  • [ 9 ] [Ma, Jianfeng]Xidian University, Shaanxi Key Laboratory of Network and System Security, Xi'an, China

Reprint 's Address:

Email:

Show more details

Related Keywords:

Related Article:

Source :

ISSN: 0743-166X

Year: 2022

Volume: 2022-May

Page: 280-289

Language: English

Cited Count:

WoS CC Cited Count:

SCOPUS Cited Count: 12

ESI Highly Cited Papers on the List: 0 Unfold All

WanFang Cited Count:

Chinese Cited Count:

30 Days PV: 0

Affiliated Colleges:

Online/Total:188/10289481
Address:FZU Library(No.2 Xuyuan Road, Fuzhou, Fujian, PRC Post Code:350116) Contact Us:0591-22865326
Copyright:FZU Library Technical Support:Beijing Aegean Software Co., Ltd. 闽ICP备05005463号-1