{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/backdoor-defense-via-suppressing-model","title":"Backdoor Defense via Suppressing Model Shortcuts","arxiv_id":"2211.05631","date":"2022-11-02","proceeding":null,"authors":["Sheng Yang","Yiming Li","Yong Jiang","Shu-Tao Xia"],"abstract":"Recent studies have demonstrated that deep neural networks (DNNs) are vulnerable to backdoor attacks during the training process. Specifically, the adversaries intend to embed hidden backdoors in DNNs so that malicious model predictions can be activated through pre-defined trigger patterns. In this paper, we explore the backdoor mechanism from the angle of the model structure. We select the skip connection for discussions, inspired by the understanding that it helps the learning of model `shortcuts' where backdoor triggers are usually easier to be learned. Specifically, we demonstrate that the attack success rate (ASR) decreases significantly when reducing the outputs of some key skip connections. Based on this observation, we design a simple yet effective backdoor removal method by suppressing the skip connections in critical layers selected by our method. We also implement fine-tuning on these layers to recover high benign accuracy and to further reduce ASR. Extensive experiments on benchmark datasets verify the effectiveness of our method.","url_abs":"https://arxiv.org/abs/2211.05631v2","url_pdf":"https://arxiv.org/pdf/2211.05631v2.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"backdoor-defense-via-suppressing-model","repo_url":"https://github.com/20000yshust/Backdoor-Defense-Via-Suppressing-Model-Shortcuts","is_official":1,"mentioned_in_paper":0,"mentioned_in_github":0,"framework":"pytorch","reach":null}],"tasks":[{"task_slug":"backdoor-defense","task_name":"backdoor defense"},{"task_slug":"model","task_name":"model"}],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"syntology_url":"https://syntology.ai/paper/2211.05631","atlas_url":"https://app.syntology.ai/?focus=2211.05631","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2211.05631"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-25T09:33:49+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/20000yshust/Backdoor-Defense-Via-Suppressing-Model-Shortcuts","reach":null}],"summary":{"ran_draft_wrong":2,"ran_honours":1},"by_repo_kind":{"official":{"samples":3,"ran":3,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":3,"samples":[{"code_sha256_prefix":"4422b01e0f2c0cc1","entry":"forward_hook","repo":"20000yshust/Backdoor-Defense-Via-Suppressing-Model-Shortcuts","repo_kind":"official","path":"SSFT.py","file_url":"https://github.com/20000yshust/Backdoor-Defense-Via-Suppressing-Model-Shortcuts/blob/HEAD/SSFT.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"4422b01e0f2c0cc1"}},{"code_sha256_prefix":"afc9001040d3aa34","entry":"gen_grid","repo":"20000yshust/Backdoor-Defense-Via-Suppressing-Model-Shortcuts","repo_kind":"official","path":"train_backdoormodel.py","file_url":"https://github.com/20000yshust/Backdoor-Defense-Via-Suppressing-Model-Shortcuts/blob/HEAD/train_backdoormodel.py","link_basis":"first_harvest_node","language":"python","status":"ran_honours","verification_level":1,"contract_check":"HONOURS","metamorphic_tier":"well_formed","behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"afc9001040d3aa34"}},{"code_sha256_prefix":"03c752f5ded652ef","entry":"register_forwardhook_for_resnet","repo":"20000yshust/Backdoor-Defense-Via-Suppressing-Model-Shortcuts","repo_kind":"official","path":"SSFT.py","file_url":"https://github.com/20000yshust/Backdoor-Defense-Via-Suppressing-Model-Shortcuts/blob/HEAD/SSFT.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"03c752f5ded652ef"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}