{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,27]],"date-time":"2025-03-27T15:24:09Z","timestamp":1743089049223,"version":"3.40.3"},"publisher-location":"Cham","reference-count":36,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783031515828"},{"type":"electronic","value":"9783031515835"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-3-031-51583-5_14","type":"book-chapter","created":{"date-parts":[[2024,1,4]],"date-time":"2024-01-04T18:03:41Z","timestamp":1704391421000},"page":"242-260","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["\u201cWe Must Protect the\u00a0Transformers\u201d: Understanding Efficacy of\u00a0Backdoor Attack Mitigation on\u00a0Transformer Models"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0009-0006-0394-0446","authenticated-orcid":false,"given":"Rohit","family":"Raj","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-5334-0056","authenticated-orcid":false,"given":"Biplab","family":"Roy","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2327-1618","authenticated-orcid":false,"given":"Abir","family":"Das","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4317-0184","authenticated-orcid":false,"given":"Mainack","family":"Mondal","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,1,5]]},"reference":[{"key":"14_CR1","unstructured":"Qiu, H., et al.: Towards a critical evaluation of robustness for deep learning backdoor countermeasures (2022). arXiv:abs\/2204.06273"},{"key":"14_CR2","doi-asserted-by":"crossref","unstructured":"Wang, B., et al.: Neural cleanse: identifying and mitigating backdoor attacks in neural networks. In: 2019 IEEE Symposium on Security and Privacy (SP), pp. 707\u2013723 (2019)","DOI":"10.1109\/SP.2019.00031"},{"key":"14_CR3","unstructured":"Gao, Y., et al.: Backdoor attacks and countermeasures on deep learning: a comprehensive review (2020). arXiv:abs\/2007.10760"},{"key":"14_CR4","doi-asserted-by":"crossref","unstructured":"Liu, Y., Xie, Y., Srivastava, A.: Neural trojans. In: 2017 IEEE International Conference on Computer Design (ICCD), pp. 45\u201348 (2017)","DOI":"10.1109\/ICCD.2017.16"},{"key":"14_CR5","unstructured":"Gu, T., Dolan-Gavitt, B., Garg, S.: BadNets: identifying vulnerabilities in the machine learning model supply chain. arXiv preprint: arXiv:1708.06733 (2017)"},{"key":"14_CR6","doi-asserted-by":"crossref","unstructured":"Ji, Y., Zhang, X., Ji, S., Luo, X., Wang, T.: Model-reuse attacks on deep learning systems. In: Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security (2018)","DOI":"10.1145\/3243734.3243757"},{"key":"14_CR7","doi-asserted-by":"crossref","unstructured":"Liu, K., Dolan-Gavitt, B., Garg, S.: Fine-Pruning: defending against backdooring attacks on deep neural networks. RAID (2018)","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"14_CR8","doi-asserted-by":"crossref","unstructured":"Doan, B.G., Abbasnejad, E., Ranasinghe, D.C.: Februus: input purification defense against trojan attacks on deep neural network systems. In: Annual Computer Security Applications Conference (2020)","DOI":"10.1145\/3427228.3427264"},{"key":"14_CR9","doi-asserted-by":"publisher","first-page":"103","DOI":"10.1109\/MDAT.2020.2968275","volume":"37","author":"E Sarkar","year":"2020","unstructured":"Sarkar, E., Alkindi, Y., Maniatakos, M.: Backdoor suppression in neural networks using input fuzzing and majority voting. IEEE Des. Test 37, 103\u2013110 (2020)","journal-title":"IEEE Des. Test"},{"key":"14_CR10","unstructured":"Villarreal-Vasquez, M., Bhargava, B.K.: ConFoc: content-focus protection against trojan attacks on neural networks (2020). arXiv:abs\/2007.00711"},{"key":"14_CR11","unstructured":"Weber, M., Xu, X., Karlas, B., Zhang, C., Li, B.: RAB: provable robustness against backdoor attacks (2020). arXiv:abs\/2003.08904"},{"key":"14_CR12","doi-asserted-by":"crossref","unstructured":"Chernikova, A., Oprea, A., Nita-Rotaru, C., Kim, B.: Are self-driving cars secure? Evasion attacks against deep neural networks for steering angle prediction. In: 2019 IEEE Security and Privacy Workshops (SPW), pp. 132\u2013137 (2019)","DOI":"10.1109\/SPW.2019.00033"},{"key":"14_CR13","doi-asserted-by":"crossref","unstructured":"Wang, Q., et al.: Adversary resistant deep neural networks with an application to malware detection. In: Proceedings of the 23rd ACM SIGKDD International Conference on Knowledge Discovery and Data Mining (2017)","DOI":"10.1145\/3097983.3098158"},{"key":"14_CR14","doi-asserted-by":"crossref","unstructured":"Debar, H., Becker, M., Siboni, D.: A neural network component for an intrusion detection system. In: Proceedings 1992 IEEE Computer Society Symposium on Research in Security and Privacy, pp. 240\u2013250 (1992)","DOI":"10.1109\/RISP.1992.213257"},{"key":"14_CR15","unstructured":"Wierzynski, C.: The challenges and opportunities of explainable AI (2018). https:\/\/ai.intel.com\/the-challenges-and-opportunities-of-explainable-ai"},{"key":"14_CR16","unstructured":"FICO\u2019s explainable machine learning challenge (2018). https:\/\/community.fico.com\/s\/explainable-machine-learning-challenge"},{"key":"14_CR17","unstructured":"Vaswani, A., et al.: Attention is all you need (2017). arXiv:abs\/1706.03762"},{"key":"14_CR18","unstructured":"Dosovitskiy, A., et al.: An image is worth 16x16 words: transformers for image recognition at scale (2021). arXiv:abs\/2010.11929"},{"key":"14_CR19","unstructured":"Touvron, H., Cord, M., Douze, M., Massa, F., Sablayrolles, A., J\u2019egou, H.: Training data-efficient image transformers & distillation through attention. ICML (2021)"},{"key":"14_CR20","doi-asserted-by":"publisher","unstructured":"Stallkamp, J., Schlipsing, M., Salmen, J., Igel, C.: The German traffic sign recognition benchmark: a multi-class classification competition. In: Proceedings of the International Joint Conference on Neural Networks, pp. 1453\u20131460 (2011). https:\/\/doi.org\/10.1109\/IJCNN.2011.6033395","DOI":"10.1109\/IJCNN.2011.6033395"},{"key":"14_CR21","doi-asserted-by":"crossref","unstructured":"Saha, A., Subramanya, A., Pirsiavash, H.: Hidden trigger backdoor attacks (2020). arXiv:abs\/1910.00033","DOI":"10.1609\/aaai.v34i07.6871"},{"key":"14_CR22","doi-asserted-by":"crossref","unstructured":"Ayub, M.A., Johnson, W.A., Talbert, D.A., Siraj, A.: Model evasion attack on intrusion detection systems using adversarial machine learning. In: 2020 54th Annual Conference on Information Sciences and Systems (CISS), pp. 1\u20136 (2020)","DOI":"10.1109\/CISS48834.2020.1570617116"},{"key":"14_CR23","doi-asserted-by":"crossref","unstructured":"Jagielski, M., Severi, G., Harger, N.P., Oprea, A.: Subpopulation data poisoning attacks. In: Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security (2021)","DOI":"10.1145\/3460120.3485368"},{"key":"14_CR24","doi-asserted-by":"publisher","first-page":"73","DOI":"10.3390\/fi13030073","volume":"13","author":"X Zhou","year":"2021","unstructured":"Zhou, X., Xu, M., Wu, Y., Zheng, N.: Deep model poisoning attack on federated learning. Future Internet 13, 73 (2021)","journal-title":"Future Internet"},{"key":"14_CR25","unstructured":"Shapira, A., Zolfi, A., Demetrio, L., Biggio, B., Shabtai, A.: Denial-of-service attack on object detection model using universal adversarial perturbation (2022). arXiv:abs\/2205.13618"},{"key":"14_CR26","doi-asserted-by":"crossref","unstructured":"Shokri, R., Stronati, M., Song, C., Shmatikov, V.: Membership inference attacks against machine learning models. In: 2017 IEEE Symposium on Security and Privacy (SP), pp. 3\u201318 (2017)","DOI":"10.1109\/SP.2017.41"},{"key":"14_CR27","unstructured":"Chen, X., Liu, C., Li, B., Lu, K., Song, D.: Targeted backdoor attacks on deep learning systems using data poisoning. arXiv preprint: arXiv:1712.05526 (2017)"},{"key":"14_CR28","doi-asserted-by":"crossref","unstructured":"Li, Y., Li, Y., Wu, B., Li, L., He, R., Lyu, S.: Invisible backdoor attack with sample-specific triggers. In: 2021 IEEE\/CVF International Conference on Computer Vision (ICCV), pp. 16443\u201316452 (2021)","DOI":"10.1109\/ICCV48922.2021.01615"},{"key":"14_CR29","doi-asserted-by":"crossref","unstructured":"Guo, W., Wang, L., Xu, Y., Xing, X., Du, M., Song, D.: Towards inspecting and eliminating trojan backdoors in deep neural networks. In: 2020 IEEE International Conference on Data Mining (ICDM), pp. 162\u2013171. IEEE (2020)","DOI":"10.1109\/ICDM50108.2020.00025"},{"key":"14_CR30","unstructured":"Chan, A., Ong, Y.S.: Poison as a cure: detecting & neutralizing variable-sized backdoor attacks in deep neural networks. arXiv preprint: arXiv:1911.08040 (2019)"},{"key":"14_CR31","doi-asserted-by":"crossref","unstructured":"Xiang, Z., Miller, D.J., Kesidis, G.: A benchmark study of backdoor data poisoning defenses for deep neural network classifiers and a novel defense. In: 2019 IEEE 29th International Workshop on Machine Learning for Signal Processing (MLSP). IEEE, pp. 1\u20136 (2019)","DOI":"10.1109\/MLSP.2019.8918908"},{"key":"14_CR32","unstructured":"Tran, B., Li, J., Madry, A.: Spectral signatures in backdoor attacks. In: Advances in Neural Information Processing Systems (NIPS), pp. 8000\u20138010 (2018). https:\/\/github.com\/MadryLab\/backdoor data poisoning"},{"key":"14_CR33","doi-asserted-by":"crossref","unstructured":"Bau, D., Zhou, B., Khosla, A., Oliva, A., Torralba, A.: Network dissection: quantifying interpretability of deep visual representations. In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 6541\u20136549 (2017)","DOI":"10.1109\/CVPR.2017.354"},{"key":"14_CR34","unstructured":"Hassani, A., Walton, S., Shah, N., Abuduweili, A., Li, J., Shi, H.: Escaping the big data paradigm with compact transformers. arXiv preprint: arXiv:2104.05704"},{"key":"14_CR35","doi-asserted-by":"crossref","unstructured":"d\u2019Ascoli, S., Touvron, H., Leavitt, M.L., Morcos, A.S., Biroli, G., Sagun, L.: ConViT: improving vision transformers with soft convolutional inductive biases. In: International Conference on Machine Learning, pp. 2286\u20132296. PMLR (2021)","DOI":"10.1088\/1742-5468\/ac9830"},{"key":"14_CR36","doi-asserted-by":"crossref","unstructured":"Tang, R., Du, M., Liu, N., Yang, F., Hu, X.: An embarrassingly simple approach for trojan attack in deep neural networks. In: Proceedings of the 26th ACM SIGKDD International Conference on Knowledge Discovery & data mining, pp. 218\u2013228 (2020)","DOI":"10.1145\/3394486.3403064"}],"container-title":["Lecture Notes in Computer Science","Security, Privacy, and Applied Cryptography Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-51583-5_14","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,11,7]],"date-time":"2024-11-07T12:53:50Z","timestamp":1730984030000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-51583-5_14"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9783031515828","9783031515835"],"references-count":36,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-51583-5_14","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"5 January 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"SPACE","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Security, Privacy, and Applied Cryptography Engineering","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Roorkee","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"India","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"14 December 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"17 December 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"13","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"space2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/iitr.ac.in\/space2023\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"45","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"14","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"31% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2.5","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}