{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/universal-litmus-patterns-revealing-backdoor","title":"Universal Litmus Patterns: Revealing Backdoor Attacks in CNNs","arxiv_id":"1906.10842","date":"2019-06-26","proceeding":"CVPR 2020 6","authors":["Soheil Kolouri","Aniruddha Saha","Hamed Pirsiavash","Heiko Hoffmann"],"abstract":"The unprecedented success of deep neural networks in many applications has made these networks a prime target for adversarial exploitation. In this paper, we introduce a benchmark technique for detecting backdoor attacks (aka Trojan attacks) on deep convolutional neural networks (CNNs). We introduce the concept of Universal Litmus Patterns (ULPs), which enable one to reveal backdoor attacks by feeding these universal patterns to the network and analyzing the output (i.e., classifying the network as `clean' or `corrupted'). This detection is fast because it requires only a few forward passes through a CNN. We demonstrate the effectiveness of ULPs for detecting backdoor attacks on thousands of networks with different architectures trained on four benchmark datasets, namely the German Traffic Sign Recognition Benchmark (GTSRB), MNIST, CIFAR10, and Tiny-ImageNet. The codes and train/test models for this paper can be found here https://umbcvision.github.io/Universal-Litmus-Patterns/.","url_abs":"https://arxiv.org/abs/1906.10842v2","url_pdf":"https://arxiv.org/pdf/1906.10842v2.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"universal-litmus-patterns-revealing-backdoor","repo_url":"https://github.com/UMBCvision/Universal-Litmus-Patterns","is_official":1,"mentioned_in_paper":0,"mentioned_in_github":1,"framework":"pytorch","reach":{"status":"ok","spdx":"MIT"}}],"tasks":[{"task_slug":"traffic-sign-recognition","task_name":"Traffic Sign Recognition"}],"methods":[],"datasets_introduced":[{"slug":"ulp-dataset","name":"ULP Dataset","full_name":""}],"methods_introduced":[],"results":[],"syntology":{"atlas_url":"https://app.syntology.ai/?focus=1906.10842","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1906.10842"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/UMBCvision/Universal-Litmus-Patterns","reach":{"status":"ok","spdx":"MIT"}}],"summary":{"ran_draft_wrong":2,"unverified":2},"by_repo_kind":{"official":{"samples":4,"ran":2,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":0,"samples":[{"code_sha256_prefix":"d9def42110729a85","entry":"conv1x1","repo":"UMBCvision/Universal-Litmus-Patterns","repo_kind":"official","path":"tiny-imagenet/resnet.py","file_url":"https://github.com/UMBCvision/Universal-Litmus-Patterns/blob/HEAD/tiny-imagenet/resnet.py","link_basis":"harvester_set","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":"deterministic","behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"d9def42110729a85"}},{"code_sha256_prefix":"160bb14bd76201b4","entry":"conv3x3","repo":"UMBCvision/Universal-Litmus-Patterns","repo_kind":"official","path":"tiny-imagenet/resnet.py","file_url":"https://github.com/UMBCvision/Universal-Litmus-Patterns/blob/HEAD/tiny-imagenet/resnet.py","link_basis":"harvester_set","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":"deterministic","behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"160bb14bd76201b4"}},{"code_sha256_prefix":"4289bf8d2ee8ad1b","entry":"dataset_append","repo":"UMBCvision/Universal-Litmus-Patterns","repo_kind":"official","path":"CIFAR-10/train_poisoned_model.py","file_url":"https://github.com/UMBCvision/Universal-Litmus-Patterns/blob/HEAD/CIFAR-10/train_poisoned_model.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"4289bf8d2ee8ad1b"}},{"code_sha256_prefix":"dc6d41d2f5c2016b","entry":"resnet18_mod","repo":"UMBCvision/Universal-Litmus-Patterns","repo_kind":"official","path":"tiny-imagenet/resnet.py","file_url":"https://github.com/UMBCvision/Universal-Litmus-Patterns/blob/HEAD/tiny-imagenet/resnet.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"dc6d41d2f5c2016b"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}