{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/ribac-towards-robust-and-imperceptible","title":"RIBAC: Towards Robust and Imperceptible Backdoor Attack against Compact DNN","arxiv_id":"2208.10608","date":"2022-08-22","proceeding":null,"authors":["Huy Phan","Cong Shi","Yi Xie","Tianfang Zhang","Zhuohang Li","Tianming Zhao","Jian Liu","Yan Wang","Yingying Chen","Bo Yuan"],"abstract":"Recently backdoor attack has become an emerging threat to the security of deep neural network (DNN) models. To date, most of the existing studies focus on backdoor attack against the uncompressed model; while the vulnerability of compressed DNNs, which are widely used in the practical applications, is little exploited yet. In this paper, we propose to study and develop Robust and Imperceptible Backdoor Attack against Compact DNN models (RIBAC). By performing systematic analysis and exploration on the important design knobs, we propose a framework that can learn the proper trigger patterns, model parameters and pruning masks in an efficient way. Thereby achieving high trigger stealthiness, high attack success rate and high model efficiency simultaneously. Extensive evaluations across different datasets, including the test against the state-of-the-art defense mechanisms, demonstrate the high robustness, stealthiness and model efficiency of RIBAC. Code is available at https://github.com/huyvnphan/ECCV2022-RIBAC","url_abs":"https://arxiv.org/abs/2208.10608v1","url_pdf":"https://arxiv.org/pdf/2208.10608v1.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"ribac-towards-robust-and-imperceptible","repo_url":"https://github.com/huyvnphan/eccv2022-ribac","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":0,"framework":"pytorch","reach":null}],"tasks":[{"task_slug":"backdoor-attack","task_name":"Backdoor Attack"}],"methods":[{"method_slug":"pruning","method_name":"Pruning"},{"method_slug":"test","method_name":"Test"}],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"syntology_url":"https://syntology.ai/paper/2208.10608","atlas_url":"https://app.syntology.ai/?focus=2208.10608","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2208.10608"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-25T09:33:49+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"deterministic:regex_extraction","url":"https://github.com/huyvnphan/ECCV2022-RIBAC","reach":null}],"summary":{"ran_draft_wrong":1,"unverified":3},"by_repo_kind":{"official":{"samples":4,"ran":1,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":0,"samples":[{"code_sha256_prefix":"36a5640b4981fdec","entry":"shared_configure_optimizers","repo":"huyvnphan/ECCV2022-RIBAC","repo_kind":"official","path":"modules/backdoor_module.py","file_url":"https://github.com/huyvnphan/ECCV2022-RIBAC/blob/HEAD/modules/backdoor_module.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"36a5640b4981fdec"}},{"code_sha256_prefix":"d7b2449cabc536ba","entry":"Accuracy","repo":"huyvnphan/ECCV2022-RIBAC","repo_kind":"official","path":"modules/backdoor_module.py","file_url":"https://github.com/huyvnphan/ECCV2022-RIBAC/blob/HEAD/modules/backdoor_module.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"d7b2449cabc536ba"}},{"code_sha256_prefix":"1bc2055f49cefbbe","entry":"AverageAccuracy","repo":"huyvnphan/ECCV2022-RIBAC","repo_kind":"official","path":"modules/backdoor_module.py","file_url":"https://github.com/huyvnphan/ECCV2022-RIBAC/blob/HEAD/modules/backdoor_module.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"1bc2055f49cefbbe"}},{"code_sha256_prefix":"255d1f66e275a424","entry":"BackdoorModule","repo":"huyvnphan/ECCV2022-RIBAC","repo_kind":"official","path":"modules/backdoor_module.py","file_url":"https://github.com/huyvnphan/ECCV2022-RIBAC/blob/HEAD/modules/backdoor_module.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"255d1f66e275a424"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}