Title
RIBAC: Towards Robust and Imperceptible Backdoor Attack against Compact DNN.
Abstract
Recently backdoor attack has become an emerging threat to the security of deep neural network (DNN) models. To date, most of the existing studies focus on backdoor attack against the uncompressed model; while the vulnerability of compressed DNNs, which are widely used in the practical applications, is little exploited yet. In this paper, we propose to study and develop Robust and Imperceptible Backdoor Attack against Compact DNN models (RIBAC). By performing systematic analysis and exploration on the important design knobs, we propose a framework that can learn the proper trigger patterns, model parameters and pruning masks in an efficient way. Thereby achieving high trigger stealthiness, high attack success rate and high model efficiency simultaneously. Extensive evaluations across different datasets, including the test against the state-of-the-art defense mechanisms, demonstrate the high robustness, stealthiness and model efficiency of RIBAC. Code is available at https://github.com/huyvnphan/ECCV2022-RIBAC.
Year
DOI
Venue
2022
10.1007/978-3-031-19772-7_41
European Conference on Computer Vision
Keywords
DocType
ISSN
Backdoor attack,Deep neural networks,Model security
Conference
European Conference on Computer Vision (ECCV 2022)
Citations 
PageRank 
References 
0
0.34
0
Authors
10
Name
Order
Citations
PageRank
Huy Phan101.35
Cong Shi201.69
Yi Xie342.17
Tianfang Zhang412.12
Zhuohang Li500.34
Tianming Zhao601.35
Jian Liu700.34
Yan Wang881140.19
Yingying Chen92495193.14
Bo Yuan1001.35