{"id":"W4304140713","doi":"10.1109/socc56010.2022.9908113","title":"Inconspicuous Data Augmentation Based Backdoor Attack on Deep Neural Networks","year":2022,"lang":"en","type":"article","venue":"","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":2,"is_retracted":false,"has_abstract":true,"ca_institutions":"","funders":"National Research Foundation Singapore; National Research Foundation; Canadian Institute for Advanced Research","keywords":"Backdoor; Computer science; Interpretability; Artificial neural network; Robustness (evolution); Artificial intelligence; Deep neural networks; Enhanced Data Rates for GSM Evolution; Edge device; Trojan; Deep learning; Machine learning; Computer security; Cloud computing; Operating system","routes":{"ca_aff":false,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":true},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0005274876,0.0001399454,0.0001247064,0.0000951334,0.0005474143,0.0001337876,0.002288612,0.00002834487,0.0006682035],"category_scores_gemma":[0.00009254264,0.0001394029,0.00003377823,0.0004654889,0.00002859629,0.0005163752,0.002085148,0.0004391823,0.00003282032],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001085929,"about_ca_system_score_gemma":0.00004056553,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00005657615,"about_ca_topic_score_gemma":0.00002315152,"domain_scores_codex":[0.9981391,0.0003375434,0.000210762,0.0005930198,0.0004421766,0.0002774413],"domain_scores_gemma":[0.9981814,0.0002829975,0.0001569318,0.001285716,0.00002251254,0.0000704504],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00001870961,0.0000409588,0.0009788148,0.000001913437,0.000006013663,0.00002435553,0.00004458445,0.9600965,0.000005638489,0.002734174,0.002309318,0.03373905],"study_design_scores_gemma":[0.0005503644,0.000132569,0.001241488,0.000001526552,0.000005640386,0.000007599981,0.00004342905,0.9957688,0.000006494864,0.00005884029,0.002016929,0.0001662715],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.004670962,0.0000169173,0.9898567,0.002256753,0.001128858,0.0001806177,0.00000376145,0.0002887982,0.001596591],"genre_scores_gemma":[0.9411912,3.762959e-7,0.05413781,0.004148131,0.0001456991,0.00002163585,0.0001441278,0.00001532114,0.0001956724],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.9365203,"threshold_uncertainty_score":0.7316359,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.05806069551596407,"score_gpt":0.3185024794927805,"score_spread":0.2604417839768165,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}