{"id":"W3178326529","doi":"10.1145/3460319.3464809","title":"AdvDoor: adversarial backdoor attack of deep learning system","year":2021,"lang":"en","type":"article","venue":"","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":57,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Waterloo","funders":"","keywords":"Backdoor; Adversarial system; Computer science; Computer security; Deep learning; Artificial intelligence; Machine learning","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001144005,0.0009878249,0.0006439829,0.0004830801,0.0003816128,0.0006662415,0.0009553613,0.0009083156,0.001619168],"category_scores_gemma":[0.004270904,0.0002791747,0.0006727778,0.0002487824,0.001165185,0.001600885,0.002207551,0.001790864,0.0002638441],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0006611903,"about_ca_system_score_gemma":0.0007801114,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001550576,"about_ca_topic_score_gemma":0.001202314,"domain_scores_codex":[0.9989304,0.0002762054,0.00005520516,0.0002071186,0.00031069,0.0002202744],"domain_scores_gemma":[0.9985476,0.0006569498,0.0001496757,0.0004038536,0.0001630086,0.0000789849],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0007644302,0.0002237964,0.006810054,0.0002604972,0.0003024329,0.0007230625,0.000186189,0.729364,0.03586063,0.03217046,0.008040176,0.1852942],"study_design_scores_gemma":[0.00001178379,0.00009431272,0.0002761575,0.000009866093,0.00001399276,0.0001283359,0.000009750294,0.9847056,0.008972804,0.005008546,0.0007570778,0.00001177289],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1212134,0.0007416521,0.8684154,0.0007588146,0.0002257289,0.0001620089,0.0002377284,0.004296479,0.003948745],"genre_scores_gemma":[0.9618772,0.0001733953,0.03566592,0.0002754083,0.00002281253,0.0000545093,0.0001374469,0.00006866887,0.001724634],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.001619168,"threshold_uncertainty_score":0.006050169,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01220603919960346,"score_gpt":0.2536974820773971,"score_spread":0.2414914428777936,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}