{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T05:00:23Z","timestamp":1750309223012,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":17,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,7,1]],"date-time":"2024-07-01T00:00:00Z","timestamp":1719792000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,7]]},"DOI":"10.1145\/3634737.3659430","type":"proceedings-article","created":{"date-parts":[[2024,6,28]],"date-time":"2024-06-28T11:51:38Z","timestamp":1719575498000},"page":"1940-1942","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["POSTER: Game of Trojans: Adaptive Adversaries Against Output-based Trojaned-Model Detectors"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7776-7865","authenticated-orcid":false,"given":"Dinuka","family":"Sahabandu","sequence":"first","affiliation":[{"name":"University of Washington, Seattle, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2968-6571","authenticated-orcid":false,"given":"Xiaojun","family":"Xu","sequence":"additional","affiliation":[{"name":"University of Illinois at Urbana-Champaign, Urbana, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9050-0129","authenticated-orcid":false,"given":"Arezoo","family":"Rajabi","sequence":"additional","affiliation":[{"name":"University of Washington, Seattle, United States of America"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8591-5522","authenticated-orcid":false,"given":"Luyao","family":"Niu","sequence":"additional","affiliation":[{"name":"University of Washington, Seattle, United States of America"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2166-7838","authenticated-orcid":false,"given":"Bhaskar","family":"Ramasubramanian","sequence":"additional","affiliation":[{"name":"Western Washington University, Bellingham, United States of America"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4883-7267","authenticated-orcid":false,"given":"Bo","family":"Li","sequence":"additional","affiliation":[{"name":"UIUC, Urbana, United States of America"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0269-8097","authenticated-orcid":false,"given":"Radha","family":"Poovendran","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, University of Washington, Seattle, United States of America"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,7]]},"reference":[{"volume-title":"Submodular functions and optimization","author":"Fujishige Satoru","key":"e_1_3_2_1_1_1","unstructured":"Satoru Fujishige. 2005. Submodular functions and optimization. Elsevier."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359790"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"e_1_3_2_1_4_1","volume-title":"Scale-up: An efficient black-box input-level backdoor detection via analyzing scaled prediction consistency. arXiv preprint arXiv:2302.03251","author":"Guo Junfeng","year":"2023","unstructured":"Junfeng Guo, Yiming Li, Xun Chen, Hanqing Guo, Lichao Sun, and Cong Liu. 2023. Scale-up: An efficient black-box input-level backdoor detection via analyzing scaled prediction consistency. arXiv preprint arXiv:2302.03251 (2023)."},{"key":"e_1_3_2_1_5_1","volume-title":"TABOR: A highly accurate approach to inspecting and restoring Trojan backdoors in AI systems. arXiv preprint arXiv:1908.01763","author":"Guo Wenbo","year":"2019","unstructured":"Wenbo Guo, Lun Wang, Xinyu Xing, Min Du, and Dawn Song. 2019. TABOR: A highly accurate approach to inspecting and restoring Trojan backdoors in AI systems. arXiv preprint arXiv:1908.01763 (2019)."},{"key":"e_1_3_2_1_6_1","volume-title":"On large-batch training for deep learning: Generalization gap and sharp minima. ICLR","author":"Keskar Nitish Shirish","year":"2017","unstructured":"Nitish Shirish Keskar, Dheevatsa Mudigere, Jorge Nocedal, Mikhail Smelyanskiy, and Ping Tak Peter Tang. 2017. On large-batch training for deep learning: Generalization gap and sharp minima. ICLR (2017)."},{"key":"e_1_3_2_1_7_1","volume-title":"Backdoor learning: A survey","author":"Li Yiming","year":"2022","unstructured":"Yiming Li, Yong Jiang, Zhifeng Li, and Shu-Tao Xia. 2022. Backdoor learning: A survey. IEEE Transactions on Neural Networks and Learning Systems (2022)."},{"key":"e_1_3_2_1_8_1","volume-title":"International Conference on Learning Representations","author":"Li Yige","year":"2021","unstructured":"Yige Li, Xixiang Lyu, Nodens Koren, Lingjuan Lyu, Bo Li, and Xingjun Ma. 2021. Neural attention distillation: Erasing backdoor triggers from deep neural networks. International Conference on Learning Representations (2021)."},{"key":"e_1_3_2_1_9_1","volume-title":"ACM SIGKDD Conf. on Knowledge Discovery and Data Mining. 2563--2573","author":"Li Yiran","year":"2022","unstructured":"Yiran Li, Xiaohao Wang, Jing Wang, and Ke Gong. 2022. Trigger-Poisoning Attack: Towards Stealthy and Efficient Trigger Embedding into Text Classification Models. In ACM SIGKDD Conf. on Knowledge Discovery and Data Mining. 2563--2573."},{"key":"e_1_3_2_1_10_1","volume-title":"Proc. IEEE\/CVF Conference on Computer Vision and Pattern Recognition. 16363--16372","author":"Liu Xiaogeng","year":"2023","unstructured":"Xiaogeng Liu, Minghui Li, Haoyu Wang, Shengshan Hu, Dengpan Ye, Hai Jin, Libing Wu, and Chaowei Xiao. 2023. Detecting Backdoors During the Inference Stage Based on Corruption Robustness Consistency. In Proc. IEEE\/CVF Conference on Computer Vision and Pattern Recognition. 16363--16372."},{"key":"e_1_3_2_1_11_1","unstructured":"Xiangyu Qi Tinghao Xie Yiming Li Saeed Mahloujifar and Prateek Mittal. 2022. Revisiting the assumption of latent separability for backdoor defenses. In The eleventh international conference on learning representations."},{"key":"e_1_3_2_1_12_1","volume-title":"Sleeper agent: Scalable hidden trigger backdoors for neural networks trained from scratch. Neural Information Processing Systems","author":"Souri Hossein","year":"2022","unstructured":"Hossein Souri, Liam Fowl, Rama Chellappa, Micah Goldblum, and Tom Goldstein. 2022. Sleeper agent: Scalable hidden trigger backdoors for neural networks trained from scratch. Neural Information Processing Systems (2022)."},{"key":"e_1_3_2_1_13_1","volume-title":"IEEE Symp. on Security and Privacy (SP). 707--723","author":"Wang Bolun","year":"2019","unstructured":"Bolun Wang, Yuanshun Yao, Shawn Shan, Huiying Li, Bimal Viswanath, Haitao Zheng, and Ben Y Zhao. 2019. Neural cleanse: Identifying and mitigating backdoor attacks in neural networks. In IEEE Symp. on Security and Privacy (SP). 707--723."},{"key":"e_1_3_2_1_14_1","volume-title":"Proc. ACM SIGKDD International Conference on Knowledge Discovery and Data Mining. 1826--1836","author":"Wang Tianyu","year":"2020","unstructured":"Tianyu Wang, Xiaoming Zhao, Yinlong Gu, Dongqing Wei, Xiaolin Sun, and Baoyue Wang. 2020. Stealthy Model Poisoning Attack: Embedding Triggers Without Affecting Clean Samples. In Proc. ACM SIGKDD International Conference on Knowledge Discovery and Data Mining. 1826--1836."},{"key":"e_1_3_2_1_15_1","volume-title":"IEEE Symposium on Security and Privacy (SP). 103--120","author":"Xu Xiaojun","year":"2021","unstructured":"Xiaojun Xu, Qi Wang, Huichen Li, Nikita Borisov, Carl A Gunter, and Bo Li. 2021. Detecting AI Trojans using meta neural analysis. In IEEE Symposium on Security and Privacy (SP). 103--120."},{"key":"e_1_3_2_1_16_1","volume-title":"ACM Workshop on Artificial Intelligence and Security. 117--127","author":"Yoshida Kota","year":"2020","unstructured":"Kota Yoshida and Takeshi Fujino. 2020. Disabling backdoor and identifying poison data by using knowledge distillation in backdoor attacks on deep neural networks. In ACM Workshop on Artificial Intelligence and Security. 117--127."},{"key":"e_1_3_2_1_17_1","volume-title":"Stealthy Backdoor Attacks on Deep Learning Models. In ACM SIGSAC Conference on Computer and Communications Security. 2647--2664","author":"Zhang Xiaojing","year":"2020","unstructured":"Xiaojing Zhang, Xinyu Zhu, Yukun Zhou, Yingqi Long, Xinyun Wu, and Zhekai Qiao. 2020. Stealthy Backdoor Attacks on Deep Learning Models. In ACM SIGSAC Conference on Computer and Communications Security. 2647--2664."}],"event":{"name":"ASIA CCS '24: 19th ACM Asia Conference on Computer and Communications Security","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Singapore Singapore","acronym":"ASIA CCS '24"},"container-title":["Proceedings of the 19th ACM Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3634737.3659430","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T23:44:07Z","timestamp":1750290247000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3634737.3659430"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,7]]},"references-count":17,"alternative-id":["10.1145\/3634737.3659430","10.1145\/3634737"],"URL":"https:\/\/doi.org\/10.1145\/3634737.3659430","relation":{},"subject":[],"published":{"date-parts":[[2024,7]]},"assertion":[{"value":"2024-07-01","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}