{"about":{"non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","site":"https://codewithpapers.app","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page","syntology":{"site":"https://syntology.ai","developers":"https://syntology.ai/developers","mcp":{"server":"https://syntology.ai/mcp","transport":"streamable-http","server_card":"https://syntology.ai/.well-known/mcp/server-card.json","auth":{"type":"trial token, no account","trial_token":"https://syntology.ai/api/oauth/trial/token","method":"POST","docs":"https://syntology.ai/developers"}},"have":"https://syntology.ai/api/graph/have?x=<method, arXiv id or title> (free, answers coverage only)","paper_base":"https://syntology.ai/paper/","atlas_base":"https://app.syntology.ai/?focus="},"machine_readable":[{"url":"https://codewithpapers.app/llms.txt","what":"the machine catalog: every machine-readable file, counted"},{"url":"https://codewithpapers.app/index/manifest.json","what":"paper-to-code index by arXiv id, with Syntology's counts"},{"url":"https://codewithpapers.app/search/manifest.json","what":"site search index (titles, authors) and its files"},{"url":"https://codewithpapers.app/download","what":"bulk files: Syntology's layer, described there"},{"url":"https://codewithpapers.app/build_manifest.json","what":"the build record: inputs, counts, exclusions, probes"}]},"url":"/task/backdoor-attack/papers/ran/1","list_of":"/task/backdoor-attack","task":"Backdoor Attack","archive":{"snapshot":"2025-07-28"},"key_notes":{"n_ran_checked":"legacy name, kept unchanged so existing readers do not break: it counts the samples that ran with no instrument failure (honoured, violated, and ran with no contract checked); it does not mean a contract was checked, and the pages print it as 'K with no instrument failure', not 'K checked'","n_constructed":"a sub-count of the samples that ran, never subtracted from them and never a failure: an executed sample whose run returned an instance of its own class (fixture_out_type equals the entry name): the run built an object and did not compute a result (Syntology's RAN record, counts.constructed)"},"syntology_read_at":"2026-09-28T10:30:06+00:00","order":"ran","order_definition":"only papers where Syntology ran at least one harvested sample; date (newest first), ties by arXiv id","caption":"We ran code from the paper's repository; we did not run it on this task or check it against the task's benchmarks.","absence":"A paper missing from this list is not a recorded non-run: it may have no arXiv id, no harvested code, or only samples that have not run yet.","page":1,"pages_in_order":1,"rows_per_page":100,"rows":[1,88],"of":88,"counts":{"archive_papers_tagged":523,"with_a_code_link":217,"where_syntology_ran_a_sample":88,"not_listed_spam_title":0,"listed":523,"listed_where_code_ran":88,"where_syntology_ran_a_sample_split":{"with_a_run_with_no_instrument_failure":67,"every_run_a_failure_of_syntologys_instrument":21,"listed_with_a_run_with_no_instrument_failure":67,"listed_every_run_a_failure_of_syntologys_instrument":21,"filter":{"states":["a run with no instrument failure","any run, instrument failures included"],"default":"a run with no instrument failure","note":"on the 'only where code ran' pages the default hides, in the browser, the rows where every run was a failure of Syntology's instrument; the second state shows them again. Rows are hidden, never re-ordered; these twins list every row"}},"definition":"distinct papers the archive tags; 'where Syntology ran a sample' counts papers with at least one harvested sample that ran, which is not a correctness claim"},"first_page":"/task/backdoor-attack/papers/ran/1","prev":null,"next":null,"papers":[{"url":"/paper/bot-breaking-long-thought-processes-of-o1","slug":"bot-breaking-long-thought-processes-of-o1","title":"To Think or Not to Think: Exploring the Unthinking Vulnerability in Large Reasoning Models","date":"2025-02-16","arxiv_id":"2502.12202","repositories_listed":2,"syntology":{"n":5,"n_ran":5,"n_constructed":0,"n_ran_checked":2,"n_instrument":3,"n_unverified":0,"n_honours":0,"n_violates":2,"n_no_contract":0,"n_pointer_only":5,"phrase":"5 ran (of which 0 constructed an object rather than computing a result; 2 with no instrument failure: 0 honoured, 2 violated, 0 with no contract checked; 3 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/bot-breaking-long-thought-processes-of-o1#ran","syntology_url":"https://syntology.ai/paper/2502.12202","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2502.12202"}},"official":{"repos":["zihao-ai/bot","zihao-ai/unthinking_vulnerability"],"state":"official (archive's flag): 5 ran","n_ran":5,"n_constructed":0,"n_ran_no_instrument_failure":2,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/scanning-trojaned-models-using-out-of","slug":"scanning-trojaned-models-using-out-of","title":"Scanning Trojaned Models Using Out-of-Distribution Samples","date":"2025-01-28","arxiv_id":"2501.17151","repositories_listed":1,"syntology":{"n":8,"n_ran":5,"n_constructed":1,"n_ran_checked":2,"n_instrument":3,"n_unverified":3,"n_honours":1,"n_violates":0,"n_no_contract":1,"n_pointer_only":8,"phrase":"5 ran (of which 1 constructed an object rather than computing a result; 2 with no instrument failure: 1 honoured, 0 violated, 1 with no contract checked; 3 where Syntology's instrument failed) · 3 unverified","sample_list":"/paper/scanning-trojaned-models-using-out-of#ran","syntology_url":"https://syntology.ai/paper/2501.17151","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2501.17151"}},"official":{"repos":["rohban-lab/trodo"],"state":"official (archive's flag): 4 ran","n_ran":4,"n_constructed":1,"n_ran_no_instrument_failure":2,"n_unverified":3,"ran_from_kinds":["official","unlocated"]}}},{"url":"/paper/backdoor-attacks-against-no-reference-image","slug":"backdoor-attacks-against-no-reference-image","title":"Backdoor Attacks against No-Reference Image Quality Assessment Models via a Scalable Trigger","date":"2024-12-10","arxiv_id":"2412.07277","repositories_listed":1,"syntology":{"n":12,"n_ran":7,"n_constructed":0,"n_ran_checked":5,"n_instrument":2,"n_unverified":5,"n_honours":1,"n_violates":0,"n_no_contract":4,"n_pointer_only":12,"phrase":"7 ran (of which 0 constructed an object rather than computing a result; 5 with no instrument failure: 1 honoured, 0 violated, 4 with no contract checked; 2 where Syntology's instrument failed) · 5 unverified","sample_list":"/paper/backdoor-attacks-against-no-reference-image#ran","syntology_url":"https://syntology.ai/paper/2412.07277","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2412.07277"}},"official":{"repos":["yuyi-sd/baiqa"],"state":"official (archive's flag): 7 ran","n_ran":7,"n_constructed":0,"n_ran_no_instrument_failure":5,"n_unverified":5,"ran_from_kinds":["official"]}}},{"url":"/paper/data-free-backdoor-attacks","slug":"data-free-backdoor-attacks","title":"Data Free Backdoor Attacks","date":"2024-12-09","arxiv_id":"2412.06219","repositories_listed":1,"syntology":{"n":13,"n_ran":9,"n_constructed":0,"n_ran_checked":7,"n_instrument":2,"n_unverified":4,"n_honours":0,"n_violates":0,"n_no_contract":7,"n_pointer_only":0,"phrase":"9 ran (of which 0 constructed an object rather than computing a result; 7 with no instrument failure: 0 honoured, 0 violated, 7 with no contract checked; 2 where Syntology's instrument failed) · 4 unverified","sample_list":"/paper/data-free-backdoor-attacks#ran","syntology_url":"https://syntology.ai/paper/2412.06219","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2412.06219"}},"official":{"repos":["aaaaaasuka/datafree_backdoor_attacks"],"state":"official (archive's flag): 9 ran","n_ran":9,"n_constructed":0,"n_ran_no_instrument_failure":7,"n_unverified":4,"ran_from_kinds":["official"]}}},{"url":"/paper/agent-security-bench-asb-formalizing-and","slug":"agent-security-bench-asb-formalizing-and","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","date":"2024-10-03","arxiv_id":"2410.02644","repositories_listed":1,"syntology":{"n":13,"n_ran":4,"n_constructed":0,"n_ran_checked":4,"n_instrument":0,"n_unverified":9,"n_honours":0,"n_violates":0,"n_no_contract":4,"n_pointer_only":0,"phrase":"4 ran (of which 0 constructed an object rather than computing a result; 4 with no instrument failure: 0 honoured, 0 violated, 4 with no contract checked; 0 where Syntology's instrument failed) · 9 unverified","sample_list":"/paper/agent-security-bench-asb-formalizing-and#ran","syntology_url":"https://syntology.ai/paper/2410.02644","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2410.02644"}},"official":{"repos":["agiresearch/asb"],"state":"official (archive's flag): 4 ran","n_ran":4,"n_constructed":0,"n_ran_no_instrument_failure":4,"n_unverified":9,"ran_from_kinds":["official"]}}},{"url":"/paper/badmerging-backdoor-attacks-against-model","slug":"badmerging-backdoor-attacks-against-model","title":"BadMerging: Backdoor Attacks Against Model Merging","date":"2024-08-14","arxiv_id":"2408.07362","repositories_listed":1,"syntology":{"n":3,"n_ran":3,"n_constructed":0,"n_ran_checked":0,"n_instrument":3,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":3,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 3 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/badmerging-backdoor-attacks-against-model#ran","syntology_url":"https://syntology.ai/paper/2408.07362","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2408.07362"}},"official":{"repos":["jzhang538/badmerging"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/baple-backdoor-attacks-on-medical","slug":"baple-backdoor-attacks-on-medical","title":"BAPLe: Backdoor Attacks on Medical Foundational Models using Prompt Learning","date":"2024-08-14","arxiv_id":"2408.07440","repositories_listed":1,"syntology":{"n":5,"n_ran":3,"n_constructed":0,"n_ran_checked":0,"n_instrument":3,"n_unverified":2,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":3,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 3 where Syntology's instrument failed) · 2 unverified","sample_list":"/paper/baple-backdoor-attacks-on-medical#ran","syntology_url":"https://syntology.ai/paper/2408.07440","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2408.07440"}},"official":{"repos":["asif-hanif/baple"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":2,"ran_from_kinds":["official"]}}},{"url":"/paper/backdoorbench-a-comprehensive-benchmark-and-1","slug":"backdoorbench-a-comprehensive-benchmark-and-1","title":"BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning","date":"2024-07-29","arxiv_id":"2407.19845","repositories_listed":1,"syntology":{"n":16,"n_ran":9,"n_constructed":0,"n_ran_checked":7,"n_instrument":2,"n_unverified":7,"n_honours":1,"n_violates":0,"n_no_contract":6,"n_pointer_only":16,"phrase":"9 ran (of which 0 constructed an object rather than computing a result; 7 with no instrument failure: 1 honoured, 0 violated, 6 with no contract checked; 2 where Syntology's instrument failed) · 7 unverified","sample_list":"/paper/backdoorbench-a-comprehensive-benchmark-and-1#ran","syntology_url":"https://syntology.ai/paper/2407.19845","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2407.19845"}},"official":{"repos":["sclbd/backdoorbench"],"state":"official (archive's flag): 9 ran","n_ran":9,"n_constructed":0,"n_ran_no_instrument_failure":7,"n_unverified":7,"ran_from_kinds":["official"]}}},{"url":"/paper/agentpoison-red-teaming-llm-agents-via","slug":"agentpoison-red-teaming-llm-agents-via","title":"AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases","date":"2024-07-17","arxiv_id":"2407.12784","repositories_listed":1,"syntology":{"n":19,"n_ran":16,"n_constructed":0,"n_ran_checked":15,"n_instrument":1,"n_unverified":3,"n_honours":1,"n_violates":0,"n_no_contract":14,"n_pointer_only":1,"phrase":"16 ran (of which 0 constructed an object rather than computing a result; 15 with no instrument failure: 1 honoured, 0 violated, 14 with no contract checked; 1 where Syntology's instrument failed) · 3 unverified","sample_list":"/paper/agentpoison-red-teaming-llm-agents-via#ran","syntology_url":"https://syntology.ai/paper/2407.12784","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2407.12784"}},"official":{"repos":["BillChan226/AgentPoison"],"state":"official (archive's flag): 16 ran","n_ran":16,"n_constructed":0,"n_ran_no_instrument_failure":15,"n_unverified":3,"ran_from_kinds":["official"]}}},{"url":"/paper/uncertainty-is-fragile-manipulating","slug":"uncertainty-is-fragile-manipulating","title":"Uncertainty is Fragile: Manipulating Uncertainty in Large Language Models","date":"2024-07-15","arxiv_id":"2407.11282","repositories_listed":2,"syntology":{"n":4,"n_ran":2,"n_constructed":0,"n_ran_checked":0,"n_instrument":2,"n_unverified":2,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":4,"phrase":"2 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 2 where Syntology's instrument failed) · 2 unverified","sample_list":"/paper/uncertainty-is-fragile-manipulating#ran","syntology_url":"https://syntology.ai/paper/2407.11282","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2407.11282"}},"official":{"repos":["qcznlp/uncertainty_attack","qcznlp/uncertainty"],"state":"official (archive's flag): 2 ran","n_ran":2,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":2,"ran_from_kinds":["official"]}}},{"url":"/paper/an-llm-assisted-easy-to-trigger-backdoor","slug":"an-llm-assisted-easy-to-trigger-backdoor","title":"An LLM-Assisted Easy-to-Trigger Backdoor Attack on Code Completion Models: Injecting Disguised Vulnerabilities against Strong Detection","date":"2024-06-10","arxiv_id":"2406.06822","repositories_listed":1,"syntology":{"n":3,"n_ran":3,"n_constructed":0,"n_ran_checked":0,"n_instrument":3,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":3,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 3 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/an-llm-assisted-easy-to-trigger-backdoor#ran","syntology_url":"https://syntology.ai/paper/2406.06822","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2406.06822"}},"official":{"repos":["datasec-lab/codebreaker"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/generalization-bound-and-new-algorithm-for","slug":"generalization-bound-and-new-algorithm-for","title":"Generalization Bound and New Algorithm for Clean-Label Backdoor Attack","date":"2024-06-02","arxiv_id":"2406.00588","repositories_listed":1,"syntology":{"n":1,"n_ran":1,"n_constructed":0,"n_ran_checked":1,"n_instrument":0,"n_unverified":0,"n_honours":0,"n_violates":1,"n_no_contract":0,"n_pointer_only":1,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 1 with no instrument failure: 0 honoured, 1 violated, 0 with no contract checked; 0 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/generalization-bound-and-new-algorithm-for#ran","syntology_url":"https://syntology.ai/paper/2406.00588","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2406.00588"}},"official":{"repos":["hong-xian/backdoor-attack"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":1,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/invisible-backdoor-attacks-on-diffusion","slug":"invisible-backdoor-attacks-on-diffusion","title":"Invisible Backdoor Attacks on Diffusion Models","date":"2024-06-02","arxiv_id":"2406.00816","repositories_listed":2,"syntology":{"n":35,"n_ran":24,"n_constructed":0,"n_ran_checked":24,"n_instrument":0,"n_unverified":11,"n_honours":1,"n_violates":0,"n_no_contract":23,"n_pointer_only":19,"phrase":"24 ran (of which 0 constructed an object rather than computing a result; 24 with no instrument failure: 1 honoured, 0 violated, 23 with no contract checked; 0 where Syntology's instrument failed) · 11 unverified","sample_list":"/paper/invisible-backdoor-attacks-on-diffusion#ran","syntology_url":"https://syntology.ai/paper/2406.00816","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2406.00816"}},"official":{"repos":["invisibletriggerdiffusion/invisible_triggers_for_diffusion"],"state":"official (archive's flag): 14 ran","n_ran":14,"n_constructed":0,"n_ran_no_instrument_failure":14,"n_unverified":5,"ran_from_kinds":["listed","official"]}}},{"url":"/paper/cross-context-backdoor-attacks-against-graph","slug":"cross-context-backdoor-attacks-against-graph","title":"Cross-Context Backdoor Attacks against Graph Prompt Learning","date":"2024-05-28","arxiv_id":"2405.17984","repositories_listed":1,"syntology":{"n":11,"n_ran":6,"n_constructed":0,"n_ran_checked":6,"n_instrument":0,"n_unverified":5,"n_honours":0,"n_violates":0,"n_no_contract":6,"n_pointer_only":11,"phrase":"6 ran (of which 0 constructed an object rather than computing a result; 6 with no instrument failure: 0 honoured, 0 violated, 6 with no contract checked; 0 where Syntology's instrument failed) · 5 unverified","sample_list":"/paper/cross-context-backdoor-attacks-against-graph#ran","syntology_url":"https://syntology.ai/paper/2405.17984","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2405.17984"}},"official":{"repos":["xtLyu/CrossBA"],"state":"official (archive's flag): 6 ran","n_ran":6,"n_constructed":0,"n_ran_no_instrument_failure":6,"n_unverified":5,"ran_from_kinds":["official"]}}},{"url":"/paper/mitigating-backdoor-attack-by-injecting","slug":"mitigating-backdoor-attack-by-injecting","title":"Mitigating Backdoor Attack by Injecting Proactive Defensive Backdoor","date":"2024-05-25","arxiv_id":"2405.16112","repositories_listed":2,"syntology":{"n":5,"n_ran":4,"n_constructed":0,"n_ran_checked":3,"n_instrument":1,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":3,"n_pointer_only":5,"phrase":"4 ran (of which 0 constructed an object rather than computing a result; 3 with no instrument failure: 0 honoured, 0 violated, 3 with no contract checked; 1 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/mitigating-backdoor-attack-by-injecting#ran","syntology_url":"https://syntology.ai/paper/2405.16112","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2405.16112"}},"official":{"repos":["shawkui/Proactive_Defensive_Backdoor","sclbd/backdoorbench"],"state":"official (archive's flag): 4 ran","n_ran":4,"n_constructed":0,"n_ran_no_instrument_failure":3,"n_unverified":1,"ran_from_kinds":["official"]}}},{"url":"/paper/rethinking-graph-backdoor-attacks-a","slug":"rethinking-graph-backdoor-attacks-a","title":"Rethinking Graph Backdoor Attacks: A Distribution-Preserving Perspective","date":"2024-05-17","arxiv_id":"2405.10757","repositories_listed":1,"syntology":{"n":7,"n_ran":7,"n_constructed":0,"n_ran_checked":7,"n_instrument":0,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":7,"n_pointer_only":7,"phrase":"7 ran (of which 0 constructed an object rather than computing a result; 7 with no instrument failure: 0 honoured, 0 violated, 7 with no contract checked; 0 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/rethinking-graph-backdoor-attacks-a#ran","syntology_url":"https://syntology.ai/paper/2405.10757","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2405.10757"}},"official":{"repos":["zzwjames/dpgba"],"state":"official (archive's flag): 7 ran","n_ran":7,"n_constructed":0,"n_ran_no_instrument_failure":7,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/beyond-traditional-threats-a-persistent","slug":"beyond-traditional-threats-a-persistent","title":"Beyond Traditional Threats: A Persistent Backdoor Attack on Federated Learning","date":"2024-04-26","arxiv_id":"2404.17617","repositories_listed":1,"syntology":{"n":2,"n_ran":2,"n_constructed":0,"n_ran_checked":1,"n_instrument":1,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":1,"n_pointer_only":2,"phrase":"2 ran (of which 0 constructed an object rather than computing a result; 1 with no instrument failure: 0 honoured, 0 violated, 1 with no contract checked; 1 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/beyond-traditional-threats-a-persistent#ran","syntology_url":"https://syntology.ai/paper/2404.17617","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2404.17617"}},"official":{"repos":["phd-taoliu/fcba"],"state":"official (archive's flag): 2 ran","n_ran":2,"n_constructed":0,"n_ran_no_instrument_failure":1,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/how-to-craft-backdoors-with-unlabeled-data","slug":"how-to-craft-backdoors-with-unlabeled-data","title":"How to Craft Backdoors with Unlabeled Data Alone?","date":"2024-04-10","arxiv_id":"2404.06694","repositories_listed":1,"syntology":{"n":8,"n_ran":7,"n_constructed":0,"n_ran_checked":7,"n_instrument":0,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":7,"n_pointer_only":8,"phrase":"7 ran (of which 0 constructed an object rather than computing a result; 7 with no instrument failure: 0 honoured, 0 violated, 7 with no contract checked; 0 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/how-to-craft-backdoors-with-unlabeled-data#ran","syntology_url":"https://syntology.ai/paper/2404.06694","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2404.06694"}},"official":{"repos":["pku-ml/nlb"],"state":"official (archive's flag): 7 ran","n_ran":7,"n_constructed":0,"n_ran_no_instrument_failure":7,"n_unverified":1,"ran_from_kinds":["official"]}}},{"url":"/paper/exploring-backdoor-vulnerabilities-of-chat","slug":"exploring-backdoor-vulnerabilities-of-chat","title":"Exploring Backdoor Vulnerabilities of Chat Models","date":"2024-04-03","arxiv_id":"2404.02406","repositories_listed":1,"syntology":{"n":5,"n_ran":4,"n_constructed":0,"n_ran_checked":1,"n_instrument":3,"n_unverified":1,"n_honours":1,"n_violates":0,"n_no_contract":0,"n_pointer_only":0,"phrase":"4 ran (of which 0 constructed an object rather than computing a result; 1 with no instrument failure: 1 honoured, 0 violated, 0 with no contract checked; 3 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/exploring-backdoor-vulnerabilities-of-chat#ran","syntology_url":"https://syntology.ai/paper/2404.02406","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2404.02406"}},"official":{"repos":["hychaochao/chat-models-backdoor-attacking"],"state":"official (archive's flag): 4 ran","n_ran":4,"n_constructed":0,"n_ran_no_instrument_failure":1,"n_unverified":1,"ran_from_kinds":["official"]}}},{"url":"/paper/lotus-evasive-and-resilient-backdoor-attacks","slug":"lotus-evasive-and-resilient-backdoor-attacks","title":"LOTUS: Evasive and Resilient Backdoor Attacks through Sub-Partitioning","date":"2024-03-25","arxiv_id":"2403.17188","repositories_listed":1,"syntology":{"n":13,"n_ran":10,"n_constructed":0,"n_ran_checked":9,"n_instrument":1,"n_unverified":3,"n_honours":0,"n_violates":0,"n_no_contract":9,"n_pointer_only":0,"phrase":"10 ran (of which 0 constructed an object rather than computing a result; 9 with no instrument failure: 0 honoured, 0 violated, 9 with no contract checked; 1 where Syntology's instrument failed) · 3 unverified","sample_list":"/paper/lotus-evasive-and-resilient-backdoor-attacks#ran","syntology_url":"https://syntology.ai/paper/2403.17188","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2403.17188"}},"official":{"repos":["megum1/lotus"],"state":"official (archive's flag): 10 ran","n_ran":10,"n_constructed":0,"n_ran_no_instrument_failure":9,"n_unverified":3,"ran_from_kinds":["official"]}}},{"url":"/paper/badedit-backdooring-large-language-models-by","slug":"badedit-backdooring-large-language-models-by","title":"BadEdit: Backdooring large language models by model editing","date":"2024-03-20","arxiv_id":"2403.13355","repositories_listed":1,"syntology":{"n":4,"n_ran":4,"n_constructed":0,"n_ran_checked":3,"n_instrument":1,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":3,"n_pointer_only":1,"phrase":"4 ran (of which 0 constructed an object rather than computing a result; 3 with no instrument failure: 0 honoured, 0 violated, 3 with no contract checked; 1 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/badedit-backdooring-large-language-models-by#ran","syntology_url":"https://syntology.ai/paper/2403.13355","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2403.13355"}},"official":{"repos":["Lyz1213/BadEdit"],"state":"official (archive's flag): 4 ran","n_ran":4,"n_constructed":0,"n_ran_no_instrument_failure":3,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/syntactic-ghost-an-imperceptible-general","slug":"syntactic-ghost-an-imperceptible-general","title":"SynGhost: Invisible and Universal Task-agnostic Backdoor Attack via Syntactic Transfer","date":"2024-02-29","arxiv_id":"2402.18945","repositories_listed":1,"syntology":{"n":10,"n_ran":4,"n_constructed":0,"n_ran_checked":4,"n_instrument":0,"n_unverified":6,"n_honours":0,"n_violates":0,"n_no_contract":4,"n_pointer_only":10,"phrase":"4 ran (of which 0 constructed an object rather than computing a result; 4 with no instrument failure: 0 honoured, 0 violated, 4 with no contract checked; 0 where Syntology's instrument failed) · 6 unverified","sample_list":"/paper/syntactic-ghost-an-imperceptible-general#ran","syntology_url":"https://syntology.ai/paper/2402.18945","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2402.18945"}},"official":{"repos":["zhou-cybersecurity-ai/synghost"],"state":"official (archive's flag): 4 ran","n_ran":4,"n_constructed":0,"n_ran_no_instrument_failure":4,"n_unverified":6,"ran_from_kinds":["official"]}}},{"url":"/paper/backdoor-attacks-on-dense-passage-retrievers","slug":"backdoor-attacks-on-dense-passage-retrievers","title":"Whispers in Grammars: Injecting Covert Backdoors to Compromise Dense Retrieval Systems","date":"2024-02-21","arxiv_id":"2402.13532","repositories_listed":1,"syntology":{"n":6,"n_ran":6,"n_constructed":0,"n_ran_checked":3,"n_instrument":3,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":3,"n_pointer_only":6,"phrase":"6 ran (of which 0 constructed an object rather than computing a result; 3 with no instrument failure: 0 honoured, 0 violated, 3 with no contract checked; 3 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/backdoor-attacks-on-dense-passage-retrievers#ran","syntology_url":"https://syntology.ai/paper/2402.13532","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2402.13532"}},"official":{"repos":["ruyue0001/backdoor_dpr"],"state":"official (archive's flag): 6 ran","n_ran":6,"n_constructed":0,"n_ran_no_instrument_failure":3,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/poisoned-forgery-face-towards-backdoor","slug":"poisoned-forgery-face-towards-backdoor","title":"Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detection","date":"2024-02-18","arxiv_id":"2402.11473","repositories_listed":1,"syntology":{"n":9,"n_ran":7,"n_constructed":0,"n_ran_checked":6,"n_instrument":1,"n_unverified":2,"n_honours":0,"n_violates":0,"n_no_contract":6,"n_pointer_only":9,"phrase":"7 ran (of which 0 constructed an object rather than computing a result; 6 with no instrument failure: 0 honoured, 0 violated, 6 with no contract checked; 1 where Syntology's instrument failed) · 2 unverified","sample_list":"/paper/poisoned-forgery-face-towards-backdoor#ran","syntology_url":"https://syntology.ai/paper/2402.11473","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2402.11473"}},"official":{"repos":["jwliang007/pff"],"state":"official (archive's flag): 7 ran","n_ran":7,"n_constructed":0,"n_ran_no_instrument_failure":6,"n_unverified":2,"ran_from_kinds":["official"]}}},{"url":"/paper/watch-out-for-your-agents-investigating","slug":"watch-out-for-your-agents-investigating","title":"Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents","date":"2024-02-17","arxiv_id":"2402.11208","repositories_listed":1,"syntology":{"n":2,"n_ran":2,"n_constructed":0,"n_ran_checked":0,"n_instrument":2,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":2,"phrase":"2 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 2 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/watch-out-for-your-agents-investigating#ran","syntology_url":"https://syntology.ai/paper/2402.11208","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2402.11208"}},"official":{"repos":["lancopku/agent-backdoor-attacks"],"state":"official (archive's flag): 2 ran","n_ran":2,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/test-time-backdoor-attacks-on-multimodal","slug":"test-time-backdoor-attacks-on-multimodal","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","date":"2024-02-13","arxiv_id":"2402.08577","repositories_listed":1,"syntology":{"n":2,"n_ran":1,"n_constructed":0,"n_ran_checked":0,"n_instrument":1,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":2,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 1 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/test-time-backdoor-attacks-on-multimodal#ran","syntology_url":"https://syntology.ai/paper/2402.08577","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2402.08577"}},"official":{"repos":["sail-sg/anydoor"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":1,"ran_from_kinds":["official"]}}},{"url":"/paper/transtroj-transferable-backdoor-attacks-to","slug":"transtroj-transferable-backdoor-attacks-to","title":"Model Supply Chain Poisoning: Backdooring Pre-trained Models via Embedding Indistinguishability","date":"2024-01-29","arxiv_id":"2401.15883","repositories_listed":1,"syntology":{"n":4,"n_ran":4,"n_constructed":0,"n_ran_checked":2,"n_instrument":2,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":2,"n_pointer_only":2,"phrase":"4 ran (of which 0 constructed an object rather than computing a result; 2 with no instrument failure: 0 honoured, 0 violated, 2 with no contract checked; 2 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/transtroj-transferable-backdoor-attacks-to#ran","syntology_url":"https://syntology.ai/paper/2401.15883","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2401.15883"}},"official":{"repos":["haowang-cqu/transtroj"],"state":"official (archive's flag): 4 ran","n_ran":4,"n_constructed":0,"n_ran_no_instrument_failure":2,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/badchain-backdoor-chain-of-thought-prompting","slug":"badchain-backdoor-chain-of-thought-prompting","title":"BadChain: Backdoor Chain-of-Thought Prompting for Large Language Models","date":"2024-01-20","arxiv_id":"2401.12242","repositories_listed":1,"syntology":{"n":15,"n_ran":13,"n_constructed":0,"n_ran_checked":13,"n_instrument":0,"n_unverified":2,"n_honours":0,"n_violates":0,"n_no_contract":13,"n_pointer_only":0,"phrase":"13 ran (of which 0 constructed an object rather than computing a result; 13 with no instrument failure: 0 honoured, 0 violated, 13 with no contract checked; 0 where Syntology's instrument failed) · 2 unverified","sample_list":"/paper/badchain-backdoor-chain-of-thought-prompting#ran","syntology_url":"https://syntology.ai/paper/2401.12242","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2401.12242"}},"official":{"repos":["django-jiang/badchain"],"state":"official (archive's flag): 13 ran","n_ran":13,"n_constructed":0,"n_ran_no_instrument_failure":13,"n_unverified":2,"ran_from_kinds":["official"]}}},{"url":"/paper/spy-watermark-robust-invisible-watermarking","slug":"spy-watermark-robust-invisible-watermarking","title":"Spy-Watermark: Robust Invisible Watermarking for Backdoor Attack","date":"2024-01-04","arxiv_id":"2401.02031","repositories_listed":1,"syntology":{"n":9,"n_ran":5,"n_constructed":0,"n_ran_checked":5,"n_instrument":0,"n_unverified":4,"n_honours":0,"n_violates":0,"n_no_contract":5,"n_pointer_only":9,"phrase":"5 ran (of which 0 constructed an object rather than computing a result; 5 with no instrument failure: 0 honoured, 0 violated, 5 with no contract checked; 0 where Syntology's instrument failed) · 4 unverified","sample_list":"/paper/spy-watermark-robust-invisible-watermarking#ran","syntology_url":"https://syntology.ai/paper/2401.02031","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2401.02031"}},"official":{"repos":["rfww/spy-watermark"],"state":"official (archive's flag): 5 ran","n_ran":5,"n_constructed":0,"n_ran_no_instrument_failure":5,"n_unverified":4,"ran_from_kinds":["official"]}}},{"url":"/paper/badrl-sparse-targeted-backdoor-attack-against","slug":"badrl-sparse-targeted-backdoor-attack-against","title":"BadRL: Sparse Targeted Backdoor Attack Against Reinforcement Learning","date":"2023-12-19","arxiv_id":"2312.12585","repositories_listed":1,"syntology":{"n":2,"n_ran":2,"n_constructed":0,"n_ran_checked":0,"n_instrument":2,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":2,"phrase":"2 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 2 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/badrl-sparse-targeted-backdoor-attack-against#ran","syntology_url":"https://syntology.ai/paper/2312.12585","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2312.12585"}},"official":{"repos":["7777777cc/code"],"state":"official (archive's flag): 2 ran","n_ran":2,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/universal-jailbreak-backdoors-from-poisoned","slug":"universal-jailbreak-backdoors-from-poisoned","title":"Universal Jailbreak Backdoors from Poisoned Human Feedback","date":"2023-11-24","arxiv_id":"2311.14455","repositories_listed":2,"syntology":{"n":4,"n_ran":2,"n_constructed":0,"n_ran_checked":2,"n_instrument":0,"n_unverified":2,"n_honours":0,"n_violates":0,"n_no_contract":2,"n_pointer_only":0,"phrase":"2 ran (of which 0 constructed an object rather than computing a result; 2 with no instrument failure: 0 honoured, 0 violated, 2 with no contract checked; 0 where Syntology's instrument failed) · 2 unverified","sample_list":"/paper/universal-jailbreak-backdoors-from-poisoned#ran","syntology_url":"https://syntology.ai/paper/2311.14455","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2311.14455"}},"official":{"repos":["ethz-spylab/rlhf-poisoning"],"state":"official (archive's flag): 2 ran","n_ran":2,"n_constructed":0,"n_ran_no_instrument_failure":2,"n_unverified":2,"ran_from_kinds":["official"]}}},{"url":"/paper/badclip-dual-embedding-guided-backdoor-attack","slug":"badclip-dual-embedding-guided-backdoor-attack","title":"BadCLIP: Dual-Embedding Guided Backdoor Attack on Multimodal Contrastive Learning","date":"2023-11-20","arxiv_id":"2311.12075","repositories_listed":1,"syntology":{"n":4,"n_ran":4,"n_constructed":0,"n_ran_checked":2,"n_instrument":2,"n_unverified":0,"n_honours":1,"n_violates":1,"n_no_contract":0,"n_pointer_only":0,"phrase":"4 ran (of which 0 constructed an object rather than computing a result; 2 with no instrument failure: 1 honoured, 1 violated, 0 with no contract checked; 2 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/badclip-dual-embedding-guided-backdoor-attack#ran","syntology_url":"https://syntology.ai/paper/2311.12075","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2311.12075"}},"official":null}},{"url":"/paper/from-trojan-horses-to-castle-walls-unveiling","slug":"from-trojan-horses-to-castle-walls-unveiling","title":"From Trojan Horses to Castle Walls: Unveiling Bilateral Data Poisoning Effects in Diffusion Models","date":"2023-11-04","arxiv_id":"2311.02373","repositories_listed":1,"syntology":{"n":4,"n_ran":4,"n_constructed":0,"n_ran_checked":2,"n_instrument":2,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":2,"n_pointer_only":4,"phrase":"4 ran (of which 0 constructed an object rather than computing a result; 2 with no instrument failure: 0 honoured, 0 violated, 2 with no contract checked; 2 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/from-trojan-horses-to-castle-walls-unveiling#ran","syntology_url":"https://syntology.ai/paper/2311.02373","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2311.02373"}},"official":{"repos":["optml-group/bibaddiff"],"state":"official (archive's flag): 4 ran","n_ran":4,"n_constructed":0,"n_ran_no_instrument_failure":2,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/label-poisoning-is-all-you-need","slug":"label-poisoning-is-all-you-need","title":"Label Poisoning is All You Need","date":"2023-10-29","arxiv_id":"2310.18933","repositories_listed":1,"syntology":{"n":10,"n_ran":6,"n_constructed":0,"n_ran_checked":5,"n_instrument":1,"n_unverified":4,"n_honours":0,"n_violates":0,"n_no_contract":5,"n_pointer_only":1,"phrase":"6 ran (of which 0 constructed an object rather than computing a result; 5 with no instrument failure: 0 honoured, 0 violated, 5 with no contract checked; 1 where Syntology's instrument failed) · 4 unverified","sample_list":"/paper/label-poisoning-is-all-you-need#ran","syntology_url":"https://syntology.ai/paper/2310.18933","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2310.18933"}},"official":{"repos":["SewoongLab/FLIP"],"state":"official (archive's flag): 6 ran","n_ran":6,"n_constructed":0,"n_ran_no_instrument_failure":5,"n_unverified":4,"ran_from_kinds":["official"]}}},{"url":"/paper/cbd-a-certified-backdoor-detector-based-on-1","slug":"cbd-a-certified-backdoor-detector-based-on-1","title":"CBD: A Certified Backdoor Detector Based on Local Dominant Probability","date":"2023-10-26","arxiv_id":"2310.17498","repositories_listed":1,"syntology":{"n":3,"n_ran":3,"n_constructed":0,"n_ran_checked":3,"n_instrument":0,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":3,"n_pointer_only":3,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 3 with no instrument failure: 0 honoured, 0 violated, 3 with no contract checked; 0 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/cbd-a-certified-backdoor-detector-based-on-1#ran","syntology_url":"https://syntology.ai/paper/2310.17498","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2310.17498"}},"official":{"repos":["zhenxianglance/cbd"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":3,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/composite-backdoor-attacks-against-large","slug":"composite-backdoor-attacks-against-large","title":"Composite Backdoor Attacks Against Large Language Models","date":"2023-10-11","arxiv_id":"2310.07676","repositories_listed":1,"syntology":{"n":4,"n_ran":3,"n_constructed":0,"n_ran_checked":2,"n_instrument":1,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":2,"n_pointer_only":4,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 2 with no instrument failure: 0 honoured, 0 violated, 2 with no contract checked; 1 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/composite-backdoor-attacks-against-large#ran","syntology_url":"https://syntology.ai/paper/2310.07676","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2310.07676"}},"official":{"repos":["miraclehh/cba"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":2,"n_unverified":1,"ran_from_kinds":["official"]}}},{"url":"/paper/horizontal-class-backdoor-to-deep-learning","slug":"horizontal-class-backdoor-to-deep-learning","title":"Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defense","date":"2023-10-01","arxiv_id":"2310.00542","repositories_listed":1,"syntology":{"n":22,"n_ran":16,"n_constructed":0,"n_ran_checked":10,"n_instrument":6,"n_unverified":6,"n_honours":0,"n_violates":0,"n_no_contract":10,"n_pointer_only":7,"phrase":"16 ran (of which 0 constructed an object rather than computing a result; 10 with no instrument failure: 0 honoured, 0 violated, 10 with no contract checked; 6 where Syntology's instrument failed) · 6 unverified","sample_list":"/paper/horizontal-class-backdoor-to-deep-learning#ran","syntology_url":"https://syntology.ai/paper/2310.00542","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2310.00542"}},"official":{"repos":["shihe98/hcb"],"state":"official (archive's flag): 4 ran","n_ran":4,"n_constructed":0,"n_ran_no_instrument_failure":3,"n_unverified":0,"ran_from_kinds":["found_in_text","official"]}}},{"url":"/paper/vdc-versatile-data-cleanser-for-detecting","slug":"vdc-versatile-data-cleanser-for-detecting","title":"VDC: Versatile Data Cleanser based on Visual-Linguistic Inconsistency by Multimodal Large Language Models","date":"2023-09-28","arxiv_id":"2309.16211","repositories_listed":1,"syntology":{"n":17,"n_ran":8,"n_constructed":4,"n_ran_checked":5,"n_instrument":3,"n_unverified":9,"n_honours":0,"n_violates":0,"n_no_contract":5,"n_pointer_only":0,"phrase":"8 ran (of which 4 constructed an object rather than computing a result; 5 with no instrument failure: 0 honoured, 0 violated, 5 with no contract checked; 3 where Syntology's instrument failed) · 9 unverified","sample_list":"/paper/vdc-versatile-data-cleanser-for-detecting#ran","syntology_url":"https://syntology.ai/paper/2309.16211","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2309.16211"}},"official":{"repos":["zihao-ai/vdc"],"state":"official (archive's flag): 8 ran","n_ran":8,"n_constructed":4,"n_ran_no_instrument_failure":5,"n_unverified":9,"ran_from_kinds":["official"]}}},{"url":"/paper/mdtd-a-multi-domain-trojan-detector-for-deep","slug":"mdtd-a-multi-domain-trojan-detector-for-deep","title":"MDTD: A Multi Domain Trojan Detector for Deep Neural Networks","date":"2023-08-30","arxiv_id":"2308.15673","repositories_listed":1,"syntology":{"n":3,"n_ran":3,"n_constructed":0,"n_ran_checked":2,"n_instrument":1,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":2,"n_pointer_only":3,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 2 with no instrument failure: 0 honoured, 0 violated, 2 with no contract checked; 1 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/mdtd-a-multi-domain-trojan-detector-for-deep#ran","syntology_url":"https://syntology.ai/paper/2308.15673","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2308.15673"}},"official":{"repos":["rajabia/mdtd"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":2,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/patchbackdoor-backdoor-attack-against-deep","slug":"patchbackdoor-backdoor-attack-against-deep","title":"PatchBackdoor: Backdoor Attack against Deep Neural Networks without Model Modification","date":"2023-08-22","arxiv_id":"2308.11822","repositories_listed":1,"syntology":{"n":1,"n_ran":1,"n_constructed":0,"n_ran_checked":0,"n_instrument":1,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":0,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 1 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/patchbackdoor-backdoor-attack-against-deep#ran","syntology_url":"https://syntology.ai/paper/2308.11822","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2308.11822"}},"official":{"repos":["xaiveryuan/patchbackdoor"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/you-can-backdoor-personalized-federated","slug":"you-can-backdoor-personalized-federated","title":"You Can Backdoor Personalized Federated Learning","date":"2023-07-29","arxiv_id":"2307.15971","repositories_listed":1,"syntology":{"n":6,"n_ran":6,"n_constructed":0,"n_ran_checked":6,"n_instrument":0,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":6,"n_pointer_only":6,"phrase":"6 ran (of which 0 constructed an object rather than computing a result; 6 with no instrument failure: 0 honoured, 0 violated, 6 with no contract checked; 0 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/you-can-backdoor-personalized-federated#ran","syntology_url":"https://syntology.ai/paper/2307.15971","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2307.15971"}},"official":{"repos":["bapfl/code"],"state":"official (archive's flag): 6 ran","n_ran":6,"n_constructed":0,"n_ran_no_instrument_failure":6,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/backdoor-defense-with-non-adversarial","slug":"backdoor-defense-with-non-adversarial","title":"Beating Backdoor Attack at Its Own Game","date":"2023-07-28","arxiv_id":"2307.15539","repositories_listed":2,"syntology":{"n":9,"n_ran":5,"n_constructed":0,"n_ran_checked":5,"n_instrument":0,"n_unverified":4,"n_honours":0,"n_violates":0,"n_no_contract":5,"n_pointer_only":9,"phrase":"5 ran (of which 0 constructed an object rather than computing a result; 5 with no instrument failure: 0 honoured, 0 violated, 5 with no contract checked; 0 where Syntology's instrument failed) · 4 unverified","sample_list":"/paper/backdoor-defense-with-non-adversarial#ran","syntology_url":"https://syntology.ai/paper/2307.15539","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2307.15539"}},"official":{"repos":["damianliumin/non-adversarial_backdoor","minliu01/non-adversarial_backdoor"],"state":"official (archive's flag): 5 ran","n_ran":5,"n_constructed":0,"n_ran_no_instrument_failure":5,"n_unverified":4,"ran_from_kinds":["official"]}}},{"url":"/paper/fmt-removing-backdoor-feature-maps-via","slug":"fmt-removing-backdoor-feature-maps-via","title":"Adversarial Feature Map Pruning for Backdoor","date":"2023-07-21","arxiv_id":"2307.11565","repositories_listed":2,"syntology":{"n":7,"n_ran":7,"n_constructed":0,"n_ran_checked":4,"n_instrument":3,"n_unverified":0,"n_honours":0,"n_violates":1,"n_no_contract":3,"n_pointer_only":7,"phrase":"7 ran (of which 0 constructed an object rather than computing a result; 4 with no instrument failure: 0 honoured, 1 violated, 3 with no contract checked; 3 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/fmt-removing-backdoor-feature-maps-via#ran","syntology_url":"https://syntology.ai/paper/2307.11565","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2307.11565"}},"official":{"repos":["ase2023paper/fmt","retsuh-bqw/fmp"],"state":"official (archive's flag): 7 ran","n_ran":7,"n_constructed":0,"n_ran_no_instrument_failure":4,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/rethinking-backdoor-attacks","slug":"rethinking-backdoor-attacks","title":"Rethinking Backdoor Attacks","date":"2023-07-19","arxiv_id":"2307.10163","repositories_listed":0,"syntology":{"n":9,"n_ran":6,"n_constructed":1,"n_ran_checked":4,"n_instrument":2,"n_unverified":3,"n_honours":0,"n_violates":0,"n_no_contract":4,"n_pointer_only":0,"phrase":"6 ran (of which 1 constructed an object rather than computing a result; 4 with no instrument failure: 0 honoured, 0 violated, 4 with no contract checked; 2 where Syntology's instrument failed) · 3 unverified","sample_list":"/paper/rethinking-backdoor-attacks#ran","syntology_url":"https://syntology.ai/paper/2307.10163","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2307.10163"}},"official":null}},{"url":"/paper/towards-stealthy-backdoor-attacks-against","slug":"towards-stealthy-backdoor-attacks-against","title":"Towards Stealthy Backdoor Attacks against Speech Recognition via Elements of Sound","date":"2023-07-17","arxiv_id":"2307.08208","repositories_listed":1,"syntology":{"n":2,"n_ran":1,"n_constructed":0,"n_ran_checked":0,"n_instrument":1,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":2,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 1 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/towards-stealthy-backdoor-attacks-against#ran","syntology_url":"https://syntology.ai/paper/2307.08208","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2307.08208"}},"official":{"repos":["hanbocai/badspeech_soe"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":1,"ran_from_kinds":["official"]}}},{"url":"/paper/villandiffusion-a-unified-backdoor-attack-1","slug":"villandiffusion-a-unified-backdoor-attack-1","title":"VillanDiffusion: A Unified Backdoor Attack Framework for Diffusion Models","date":"2023-06-12","arxiv_id":"2306.06874","repositories_listed":1,"syntology":{"n":14,"n_ran":9,"n_constructed":0,"n_ran_checked":7,"n_instrument":2,"n_unverified":5,"n_honours":1,"n_violates":2,"n_no_contract":4,"n_pointer_only":3,"phrase":"9 ran (of which 0 constructed an object rather than computing a result; 7 with no instrument failure: 1 honoured, 2 violated, 4 with no contract checked; 2 where Syntology's instrument failed) · 5 unverified","sample_list":"/paper/villandiffusion-a-unified-backdoor-attack-1#ran","syntology_url":"https://syntology.ai/paper/2306.06874","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2306.06874"}},"official":{"repos":["ibm/villandiffusion"],"state":"official (archive's flag): 9 ran","n_ran":9,"n_constructed":0,"n_ran_no_instrument_failure":7,"n_unverified":5,"ran_from_kinds":["official"]}}},{"url":"/paper/text-to-image-diffusion-models-can-be-easily","slug":"text-to-image-diffusion-models-can-be-easily","title":"Text-to-Image Diffusion Models can be Easily Backdoored through Multimodal Data Poisoning","date":"2023-05-07","arxiv_id":"2305.04175","repositories_listed":1,"syntology":{"n":4,"n_ran":2,"n_constructed":0,"n_ran_checked":2,"n_instrument":0,"n_unverified":2,"n_honours":0,"n_violates":0,"n_no_contract":2,"n_pointer_only":0,"phrase":"2 ran (of which 0 constructed an object rather than computing a result; 2 with no instrument failure: 0 honoured, 0 violated, 2 with no contract checked; 0 where Syntology's instrument failed) · 2 unverified","sample_list":"/paper/text-to-image-diffusion-models-can-be-easily#ran","syntology_url":"https://syntology.ai/paper/2305.04175","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2305.04175"}},"official":{"repos":["sf-zhai/badt2i"],"state":"official (archive's flag): 2 ran","n_ran":2,"n_constructed":0,"n_ran_no_instrument_failure":2,"n_unverified":2,"ran_from_kinds":["official"]}}},{"url":"/paper/unicorn-a-unified-backdoor-trigger-inversion","slug":"unicorn-a-unified-backdoor-trigger-inversion","title":"UNICORN: A Unified Backdoor Trigger Inversion Framework","date":"2023-04-05","arxiv_id":"2304.02786","repositories_listed":1,"syntology":{"n":12,"n_ran":7,"n_constructed":0,"n_ran_checked":4,"n_instrument":3,"n_unverified":5,"n_honours":0,"n_violates":0,"n_no_contract":4,"n_pointer_only":3,"phrase":"7 ran (of which 0 constructed an object rather than computing a result; 4 with no instrument failure: 0 honoured, 0 violated, 4 with no contract checked; 3 where Syntology's instrument failed) · 5 unverified","sample_list":"/paper/unicorn-a-unified-backdoor-trigger-inversion#ran","syntology_url":"https://syntology.ai/paper/2304.02786","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2304.02786"}},"official":{"repos":["ru-system-software-and-security/unicorn"],"state":"official (archive's flag): 7 ran","n_ran":7,"n_constructed":0,"n_ran_no_instrument_failure":4,"n_unverified":5,"ran_from_kinds":["official"]}}},{"url":"/paper/robust-contrastive-language-image-pretraining","slug":"robust-contrastive-language-image-pretraining","title":"Robust Contrastive Language-Image Pre-training against Data Poisoning and Backdoor Attacks","date":"2023-03-13","arxiv_id":"2303.06854","repositories_listed":1,"syntology":{"n":2,"n_ran":1,"n_constructed":0,"n_ran_checked":0,"n_instrument":1,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":2,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 1 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/robust-contrastive-language-image-pretraining#ran","syntology_url":"https://syntology.ai/paper/2303.06854","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2303.06854"}},"official":{"repos":["bigml-cs-ucla/roclip"],"state":"official: no sample here; runs from other or unrecorded repositories","n_ran":0,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["unlocated"]}}},{"url":"/paper/learning-to-backdoor-federated-learning","slug":"learning-to-backdoor-federated-learning","title":"Learning to Backdoor Federated Learning","date":"2023-03-06","arxiv_id":"2303.03320","repositories_listed":1,"syntology":{"n":13,"n_ran":8,"n_constructed":0,"n_ran_checked":8,"n_instrument":0,"n_unverified":5,"n_honours":0,"n_violates":0,"n_no_contract":8,"n_pointer_only":0,"phrase":"8 ran (of which 0 constructed an object rather than computing a result; 8 with no instrument failure: 0 honoured, 0 violated, 8 with no contract checked; 0 where Syntology's instrument failed) · 5 unverified","sample_list":"/paper/learning-to-backdoor-federated-learning#ran","syntology_url":"https://syntology.ai/paper/2303.03320","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2303.03320"}},"official":{"repos":["HengerLi/RLBackdoorFL"],"state":"official (archive's flag): 8 ran","n_ran":8,"n_constructed":0,"n_ran_no_instrument_failure":8,"n_unverified":5,"ran_from_kinds":["official"]}}},{"url":"/paper/cleanclip-mitigating-data-poisoning-attacks","slug":"cleanclip-mitigating-data-poisoning-attacks","title":"CleanCLIP: Mitigating Data Poisoning Attacks in Multimodal Contrastive Learning","date":"2023-03-06","arxiv_id":"2303.03323","repositories_listed":1,"syntology":{"n":3,"n_ran":1,"n_constructed":0,"n_ran_checked":1,"n_instrument":0,"n_unverified":2,"n_honours":1,"n_violates":0,"n_no_contract":0,"n_pointer_only":0,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 1 with no instrument failure: 1 honoured, 0 violated, 0 with no contract checked; 0 where Syntology's instrument failed) · 2 unverified","sample_list":"/paper/cleanclip-mitigating-data-poisoning-attacks#ran","syntology_url":"https://syntology.ai/paper/2303.03323","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2303.03323"}},"official":{"repos":["nishadsinghi/cleanclip"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":1,"n_unverified":2,"ran_from_kinds":["official"]}}},{"url":"/paper/defending-against-backdoor-attacks-by-layer","slug":"defending-against-backdoor-attacks-by-layer","title":"Defending Against Backdoor Attacks by Layer-wise Feature Analysis","date":"2023-02-24","arxiv_id":"2302.12758","repositories_listed":1,"syntology":{"n":9,"n_ran":5,"n_constructed":0,"n_ran_checked":4,"n_instrument":1,"n_unverified":4,"n_honours":0,"n_violates":0,"n_no_contract":4,"n_pointer_only":0,"phrase":"5 ran (of which 0 constructed an object rather than computing a result; 4 with no instrument failure: 0 honoured, 0 violated, 4 with no contract checked; 1 where Syntology's instrument failed) · 4 unverified","sample_list":"/paper/defending-against-backdoor-attacks-by-layer#ran","syntology_url":"https://syntology.ai/paper/2302.12758","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2302.12758"}},"official":{"repos":["najeebjebreel/dbalfa"],"state":"official (archive's flag): 5 ran","n_ran":5,"n_constructed":0,"n_ran_no_instrument_failure":4,"n_unverified":4,"ran_from_kinds":["official"]}}},{"url":"/paper/adversarial-machine-learning-a-systematic","slug":"adversarial-machine-learning-a-systematic","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","date":"2023-02-19","arxiv_id":"2302.09457","repositories_listed":1,"syntology":{"n":2,"n_ran":2,"n_constructed":0,"n_ran_checked":1,"n_instrument":1,"n_unverified":0,"n_honours":1,"n_violates":0,"n_no_contract":0,"n_pointer_only":2,"phrase":"2 ran (of which 0 constructed an object rather than computing a result; 1 with no instrument failure: 1 honoured, 0 violated, 0 with no contract checked; 1 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/adversarial-machine-learning-a-systematic#ran","syntology_url":"https://syntology.ai/paper/2302.09457","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2302.09457"}},"official":{"repos":["sclbd/backdoorbench"],"state":"official (archive's flag): 2 ran","n_ran":2,"n_constructed":0,"n_ran_no_instrument_failure":1,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/beagle-forensics-of-deep-learning-backdoor","slug":"beagle-forensics-of-deep-learning-backdoor","title":"BEAGLE: Forensics of Deep Learning Backdoor Attack for Better Defense","date":"2023-01-16","arxiv_id":"2301.06241","repositories_listed":1,"syntology":{"n":6,"n_ran":3,"n_constructed":0,"n_ran_checked":2,"n_instrument":1,"n_unverified":3,"n_honours":2,"n_violates":0,"n_no_contract":0,"n_pointer_only":0,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 2 with no instrument failure: 2 honoured, 0 violated, 0 with no contract checked; 1 where Syntology's instrument failed) · 3 unverified","sample_list":"/paper/beagle-forensics-of-deep-learning-backdoor#ran","syntology_url":"https://syntology.ai/paper/2301.06241","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2301.06241"}},"official":{"repos":["megum1/beagle"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":2,"n_unverified":3,"ran_from_kinds":["official"]}}},{"url":"/paper/backdoor-attacks-against-dataset-distillation","slug":"backdoor-attacks-against-dataset-distillation","title":"Backdoor Attacks Against Dataset Distillation","date":"2023-01-03","arxiv_id":"2301.01197","repositories_listed":2,"syntology":{"n":15,"n_ran":13,"n_constructed":0,"n_ran_checked":11,"n_instrument":2,"n_unverified":2,"n_honours":1,"n_violates":0,"n_no_contract":10,"n_pointer_only":6,"phrase":"13 ran (of which 0 constructed an object rather than computing a result; 11 with no instrument failure: 1 honoured, 0 violated, 10 with no contract checked; 2 where Syntology's instrument failed) · 2 unverified","sample_list":"/paper/backdoor-attacks-against-dataset-distillation#ran","syntology_url":"https://syntology.ai/paper/2301.01197","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2301.01197"}},"official":{"repos":["liuyugeng/baadd"],"state":"official (archive's flag): 13 ran","n_ran":13,"n_constructed":0,"n_ran_no_instrument_failure":11,"n_unverified":2,"ran_from_kinds":["official"]}}},{"url":"/paper/badprompt-backdoor-attacks-on-continuous","slug":"badprompt-backdoor-attacks-on-continuous","title":"BadPrompt: Backdoor Attacks on Continuous Prompts","date":"2022-11-27","arxiv_id":"2211.14719","repositories_listed":1,"syntology":{"n":1,"n_ran":1,"n_constructed":0,"n_ran_checked":0,"n_instrument":1,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":1,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 1 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/badprompt-backdoor-attacks-on-continuous#ran","syntology_url":"https://syntology.ai/paper/2211.14719","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2211.14719"}},"official":{"repos":["paperspapers/badprompt"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/backdoor-attacks-for-remote-sensing-data-with","slug":"backdoor-attacks-for-remote-sensing-data-with","title":"Backdoor Attacks for Remote Sensing Data with Wavelet Transform","date":"2022-11-15","arxiv_id":"2211.08044","repositories_listed":1,"syntology":{"n":10,"n_ran":8,"n_constructed":0,"n_ran_checked":6,"n_instrument":2,"n_unverified":2,"n_honours":0,"n_violates":0,"n_no_contract":6,"n_pointer_only":1,"phrase":"8 ran (of which 0 constructed an object rather than computing a result; 6 with no instrument failure: 0 honoured, 0 violated, 6 with no contract checked; 2 where Syntology's instrument failed) · 2 unverified","sample_list":"/paper/backdoor-attacks-for-remote-sensing-data-with#ran","syntology_url":"https://syntology.ai/paper/2211.08044","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2211.08044"}},"official":{"repos":["ndraeger/waba"],"state":"official (archive's flag): 8 ran","n_ran":8,"n_constructed":0,"n_ran_no_instrument_failure":6,"n_unverified":2,"ran_from_kinds":["official"]}}},{"url":"/paper/flip-a-provable-defense-framework-for","slug":"flip-a-provable-defense-framework-for","title":"FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning","date":"2022-10-23","arxiv_id":"2210.12873","repositories_listed":1,"syntology":{"n":1,"n_ran":1,"n_constructed":0,"n_ran_checked":0,"n_instrument":1,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":1,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 1 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/flip-a-provable-defense-framework-for#ran","syntology_url":"https://syntology.ai/paper/2210.12873","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2210.12873"}},"official":{"repos":["KaiyuanZh/FLIP"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/demystifying-self-supervised-trojan-attacks","slug":"demystifying-self-supervised-trojan-attacks","title":"An Embarrassingly Simple Backdoor Attack on Self-supervised Learning","date":"2022-10-13","arxiv_id":"2210.07346","repositories_listed":4,"syntology":{"n":2,"n_ran":2,"n_constructed":0,"n_ran_checked":0,"n_instrument":2,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":2,"phrase":"2 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 2 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/demystifying-self-supervised-trojan-attacks#ran","syntology_url":"https://syntology.ai/paper/2210.07346","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2210.07346"}},"official":{"repos":["meet-cjli/ctrl","CCCjiang/CTRL"],"state":"community repositories only","n_ran":0,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["listed"]}}},{"url":"/paper/trojvit-trojan-insertion-in-vision","slug":"trojvit-trojan-insertion-in-vision","title":"TrojViT: Trojan Insertion in Vision Transformers","date":"2022-08-27","arxiv_id":"2208.13049","repositories_listed":1,"syntology":{"n":13,"n_ran":12,"n_constructed":0,"n_ran_checked":8,"n_instrument":4,"n_unverified":1,"n_honours":1,"n_violates":0,"n_no_contract":7,"n_pointer_only":4,"phrase":"12 ran (of which 0 constructed an object rather than computing a result; 8 with no instrument failure: 1 honoured, 0 violated, 7 with no contract checked; 4 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/trojvit-trojan-insertion-in-vision#ran","syntology_url":"https://syntology.ai/paper/2208.13049","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2208.13049"}},"official":{"repos":["mxzheng/trojvit"],"state":"official (archive's flag): 12 ran","n_ran":12,"n_constructed":0,"n_ran_no_instrument_failure":8,"n_unverified":1,"ran_from_kinds":["official"]}}},{"url":"/paper/ribac-towards-robust-and-imperceptible","slug":"ribac-towards-robust-and-imperceptible","title":"RIBAC: Towards Robust and Imperceptible Backdoor Attack against Compact DNN","date":"2022-08-22","arxiv_id":"2208.10608","repositories_listed":1,"syntology":{"n":4,"n_ran":1,"n_constructed":0,"n_ran_checked":0,"n_instrument":1,"n_unverified":3,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":0,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 1 where Syntology's instrument failed) · 3 unverified","sample_list":"/paper/ribac-towards-robust-and-imperceptible#ran","syntology_url":"https://syntology.ai/paper/2208.10608","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2208.10608"}},"official":{"repos":["huyvnphan/eccv2022-ribac"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":3,"ran_from_kinds":["official"]}}},{"url":"/paper/versatile-weight-attack-via-flipping-limited","slug":"versatile-weight-attack-via-flipping-limited","title":"Versatile Weight Attack via Flipping Limited Bits","date":"2022-07-25","arxiv_id":"2207.12405","repositories_listed":1,"syntology":{"n":4,"n_ran":2,"n_constructed":0,"n_ran_checked":1,"n_instrument":1,"n_unverified":2,"n_honours":1,"n_violates":0,"n_no_contract":0,"n_pointer_only":4,"phrase":"2 ran (of which 0 constructed an object rather than computing a result; 1 with no instrument failure: 1 honoured, 0 violated, 0 with no contract checked; 1 where Syntology's instrument failed) · 2 unverified","sample_list":"/paper/versatile-weight-attack-via-flipping-limited#ran","syntology_url":"https://syntology.ai/paper/2207.12405","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2207.12405"}},"official":{"repos":["jiawangbai/versatile-weight-attack"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":2,"ran_from_kinds":["official","unlocated"]}}},{"url":"/paper/badhash-invisible-backdoor-attacks-against","slug":"badhash-invisible-backdoor-attacks-against","title":"BadHash: Invisible Backdoor Attacks against Deep Hashing with Clean Label","date":"2022-07-01","arxiv_id":"2207.00278","repositories_listed":1,"syntology":{"n":12,"n_ran":10,"n_constructed":0,"n_ran_checked":9,"n_instrument":1,"n_unverified":2,"n_honours":0,"n_violates":0,"n_no_contract":9,"n_pointer_only":1,"phrase":"10 ran (of which 0 constructed an object rather than computing a result; 9 with no instrument failure: 0 honoured, 0 violated, 9 with no contract checked; 1 where Syntology's instrument failed) · 2 unverified","sample_list":"/paper/badhash-invisible-backdoor-attacks-against#ran","syntology_url":"https://syntology.ai/paper/2207.00278","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2207.00278"}},"official":{"repos":["cgcl-codes/badhash"],"state":"official (archive's flag): 10 ran","n_ran":10,"n_constructed":0,"n_ran_no_instrument_failure":9,"n_unverified":2,"ran_from_kinds":["official"]}}},{"url":"/paper/backdoorbench-a-comprehensive-benchmark-of","slug":"backdoorbench-a-comprehensive-benchmark-of","title":"BackdoorBench: A Comprehensive Benchmark of Backdoor Learning","date":"2022-06-25","arxiv_id":"2206.12654","repositories_listed":1,"syntology":{"n":3,"n_ran":2,"n_constructed":0,"n_ran_checked":1,"n_instrument":1,"n_unverified":1,"n_honours":1,"n_violates":0,"n_no_contract":0,"n_pointer_only":3,"phrase":"2 ran (of which 0 constructed an object rather than computing a result; 1 with no instrument failure: 1 honoured, 0 violated, 0 with no contract checked; 1 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/backdoorbench-a-comprehensive-benchmark-of#ran","syntology_url":"https://syntology.ai/paper/2206.12654","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2206.12654"}},"official":{"repos":["sclbd/backdoorbench"],"state":"official (archive's flag): 2 ran","n_ran":2,"n_constructed":0,"n_ran_no_instrument_failure":1,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/bagflip-a-certified-defense-against-data","slug":"bagflip-a-certified-defense-against-data","title":"BagFlip: A Certified Defense against Data Poisoning","date":"2022-05-26","arxiv_id":"2205.13634","repositories_listed":1,"syntology":{"n":8,"n_ran":5,"n_constructed":0,"n_ran_checked":3,"n_instrument":2,"n_unverified":3,"n_honours":3,"n_violates":0,"n_no_contract":0,"n_pointer_only":0,"phrase":"5 ran (of which 0 constructed an object rather than computing a result; 3 with no instrument failure: 3 honoured, 0 violated, 0 with no contract checked; 2 where Syntology's instrument failed) · 3 unverified","sample_list":"/paper/bagflip-a-certified-defense-against-data#ran","syntology_url":"https://syntology.ai/paper/2205.13634","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2205.13634"}},"official":{"repos":["foreverzyh/defend_framework"],"state":"official (archive's flag): 5 ran","n_ran":5,"n_constructed":0,"n_ran_no_instrument_failure":3,"n_unverified":3,"ran_from_kinds":["official"]}}},{"url":"/paper/universal-post-training-backdoor-detection","slug":"universal-post-training-backdoor-detection","title":"MM-BD: Post-Training Detection of Backdoor Attacks with Arbitrary Backdoor Pattern Types Using a Maximum Margin Statistic","date":"2022-05-13","arxiv_id":"2205.06900","repositories_listed":1,"syntology":{"n":1,"n_ran":1,"n_constructed":0,"n_ran_checked":1,"n_instrument":0,"n_unverified":0,"n_honours":1,"n_violates":0,"n_no_contract":0,"n_pointer_only":1,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 1 with no instrument failure: 1 honoured, 0 violated, 0 with no contract checked; 0 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/universal-post-training-backdoor-detection#ran","syntology_url":"https://syntology.ai/paper/2205.06900","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2205.06900"}},"official":{"repos":["wanghangpsu/mm-bd"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":1,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/imperceptible-backdoor-attack-from-input","slug":"imperceptible-backdoor-attack-from-input","title":"Imperceptible Backdoor Attack: From Input Space to Feature Representation","date":"2022-05-06","arxiv_id":"2205.03190","repositories_listed":1,"syntology":{"n":2,"n_ran":1,"n_constructed":1,"n_ran_checked":1,"n_instrument":0,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":1,"n_pointer_only":2,"phrase":"1 ran (of which 1 constructed an object rather than computing a result; 1 with no instrument failure: 0 honoured, 0 violated, 1 with no contract checked; 0 where Syntology's instrument failed) · 1 unverified; the one sample that ran constructed an object rather than computing a result","sample_list":"/paper/imperceptible-backdoor-attack-from-input#ran","syntology_url":"https://syntology.ai/paper/2205.03190","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2205.03190"}},"official":{"repos":["ekko-zn/ijcai2022-backdoor"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":1,"n_ran_no_instrument_failure":1,"n_unverified":1,"ran_from_kinds":["official"]}}},{"url":"/paper/narcissus-a-practical-clean-label-backdoor","slug":"narcissus-a-practical-clean-label-backdoor","title":"Narcissus: A Practical Clean-Label Backdoor Attack with Limited Information","date":"2022-04-11","arxiv_id":"2204.05255","repositories_listed":3,"syntology":{"n":3,"n_ran":2,"n_constructed":0,"n_ran_checked":0,"n_instrument":2,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":2,"phrase":"2 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 2 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/narcissus-a-practical-clean-label-backdoor#ran","syntology_url":"https://syntology.ai/paper/2204.05255","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2204.05255"}},"official":{"repos":["ruoxi-jia-group/narcissus-backdoor-attack"],"state":"community repositories only","n_ran":0,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["listed"]}}},{"url":"/paper/fiba-frequency-injection-based-backdoor","slug":"fiba-frequency-injection-based-backdoor","title":"FIBA: Frequency-Injection based Backdoor Attack in Medical Image Analysis","date":"2021-12-02","arxiv_id":"2112.01148","repositories_listed":3,"syntology":{"n":2,"n_ran":2,"n_constructed":0,"n_ran_checked":0,"n_instrument":2,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":0,"phrase":"2 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 2 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/fiba-frequency-injection-based-backdoor#ran","syntology_url":"https://syntology.ai/paper/2112.01148","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2112.01148"}},"official":{"repos":["hazardfy/fiba"],"state":"community repositories only","n_ran":0,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["listed"]}}},{"url":"/paper/triggerless-backdoor-attack-for-nlp-tasks","slug":"triggerless-backdoor-attack-for-nlp-tasks","title":"Triggerless Backdoor Attack for NLP Tasks with Clean Labels","date":"2021-11-15","arxiv_id":"2111.07970","repositories_listed":2,"syntology":{"n":1,"n_ran":1,"n_constructed":0,"n_ran_checked":1,"n_instrument":0,"n_unverified":0,"n_honours":0,"n_violates":1,"n_no_contract":0,"n_pointer_only":0,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 1 with no instrument failure: 0 honoured, 1 violated, 0 with no contract checked; 0 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/triggerless-backdoor-attack-for-nlp-tasks#ran","syntology_url":"https://syntology.ai/paper/2111.07970","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2111.07970"}},"official":{"repos":["leileigan/clean_label_textual_backdoor_attack"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":1,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/qu-anti-zation-exploiting-quantization","slug":"qu-anti-zation-exploiting-quantization","title":"Qu-ANTI-zation: Exploiting Quantization Artifacts for Achieving Adversarial Outcomes","date":"2021-10-26","arxiv_id":"2110.13541","repositories_listed":1,"syntology":{"n":12,"n_ran":10,"n_constructed":10,"n_ran_checked":10,"n_instrument":0,"n_unverified":2,"n_honours":0,"n_violates":0,"n_no_contract":10,"n_pointer_only":0,"phrase":"10 ran (of which 10 constructed an object rather than computing a result; 10 with no instrument failure: 0 honoured, 0 violated, 10 with no contract checked; 0 where Syntology's instrument failed) · 2 unverified; every one of the 10 samples that ran constructed an object rather than computing a result","sample_list":"/paper/qu-anti-zation-exploiting-quantization#ran","syntology_url":"https://syntology.ai/paper/2110.13541","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2110.13541"}},"official":{"repos":["secure-ai-systems-group/qu-anti-zation"],"state":"official (archive's flag): 10 ran","n_ran":10,"n_constructed":10,"n_ran_no_instrument_failure":10,"n_unverified":2,"ran_from_kinds":["official"]}}},{"url":"/paper/excess-capacity-and-backdoor-poisoning","slug":"excess-capacity-and-backdoor-poisoning","title":"Excess Capacity and Backdoor Poisoning","date":"2021-09-02","arxiv_id":"2109.00685","repositories_listed":1,"syntology":{"n":3,"n_ran":3,"n_constructed":0,"n_ran_checked":3,"n_instrument":0,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":3,"n_pointer_only":0,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 3 with no instrument failure: 0 honoured, 0 violated, 3 with no contract checked; 0 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/excess-capacity-and-backdoor-poisoning#ran","syntology_url":"https://syntology.ai/paper/2109.00685","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2109.00685"}},"official":{"repos":["narenmanoj/mnist-adv-training"],"state":"official: no sample here; runs from other or unrecorded repositories","n_ran":0,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["found_in_text"]}}},{"url":"/paper/poison-ink-robust-and-invisible-backdoor","slug":"poison-ink-robust-and-invisible-backdoor","title":"Poison Ink: Robust and Invisible Backdoor Attack","date":"2021-08-05","arxiv_id":"2108.02488","repositories_listed":1,"syntology":{"n":2,"n_ran":1,"n_constructed":0,"n_ran_checked":0,"n_instrument":1,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":0,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 1 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/poison-ink-robust-and-invisible-backdoor#ran","syntology_url":"https://syntology.ai/paper/2108.02488","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2108.02488"}},"official":null}},{"url":"/paper/badencoder-backdoor-attacks-to-pre-trained","slug":"badencoder-backdoor-attacks-to-pre-trained","title":"BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning","date":"2021-08-01","arxiv_id":"2108.00352","repositories_listed":7,"syntology":{"n":8,"n_ran":5,"n_constructed":0,"n_ran_checked":1,"n_instrument":4,"n_unverified":3,"n_honours":0,"n_violates":0,"n_no_contract":1,"n_pointer_only":2,"phrase":"5 ran (of which 0 constructed an object rather than computing a result; 1 with no instrument failure: 0 honoured, 0 violated, 1 with no contract checked; 4 where Syntology's instrument failed) · 3 unverified","sample_list":"/paper/badencoder-backdoor-attacks-to-pre-trained#ran","syntology_url":"https://syntology.ai/paper/2108.00352","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2108.00352"}},"official":{"repos":["jjy1994/BadEncoder"],"state":"community repositories only","n_ran":0,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["listed"]}}},{"url":"/paper/sleeper-agent-scalable-hidden-trigger","slug":"sleeper-agent-scalable-hidden-trigger","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","date":"2021-06-16","arxiv_id":"2106.08970","repositories_listed":1,"syntology":{"n":3,"n_ran":1,"n_constructed":0,"n_ran_checked":0,"n_instrument":1,"n_unverified":2,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":3,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 1 where Syntology's instrument failed) · 2 unverified","sample_list":"/paper/sleeper-agent-scalable-hidden-trigger#ran","syntology_url":"https://syntology.ai/paper/2106.08970","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2106.08970"}},"official":{"repos":["hsouri/Sleeper-Agent"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":2,"ran_from_kinds":["official"]}}},{"url":"/paper/hidden-killer-invisible-textual-backdoor","slug":"hidden-killer-invisible-textual-backdoor","title":"Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger","date":"2021-05-26","arxiv_id":"2105.12400","repositories_listed":2,"syntology":{"n":2,"n_ran":1,"n_constructed":1,"n_ran_checked":1,"n_instrument":0,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":1,"n_pointer_only":0,"phrase":"1 ran (of which 1 constructed an object rather than computing a result; 1 with no instrument failure: 0 honoured, 0 violated, 1 with no contract checked; 0 where Syntology's instrument failed) · 1 unverified; the one sample that ran constructed an object rather than computing a result","sample_list":"/paper/hidden-killer-invisible-textual-backdoor#ran","syntology_url":"https://syntology.ai/paper/2105.12400","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2105.12400"}},"official":{"repos":["thunlp/HiddenKiller"],"state":"official: harvested, nothing ran","n_ran":0,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":1,"ran_from_kinds":["listed"]}}},{"url":"/paper/backdoor-attacks-on-self-supervised-learning","slug":"backdoor-attacks-on-self-supervised-learning","title":"Backdoor Attacks on Self-Supervised Learning","date":"2021-05-21","arxiv_id":"2105.10123","repositories_listed":2,"syntology":{"n":13,"n_ran":11,"n_constructed":0,"n_ran_checked":5,"n_instrument":6,"n_unverified":2,"n_honours":1,"n_violates":0,"n_no_contract":4,"n_pointer_only":8,"phrase":"11 ran (of which 0 constructed an object rather than computing a result; 5 with no instrument failure: 1 honoured, 0 violated, 4 with no contract checked; 6 where Syntology's instrument failed) · 2 unverified","sample_list":"/paper/backdoor-attacks-on-self-supervised-learning#ran","syntology_url":"https://syntology.ai/paper/2105.10123","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2105.10123"}},"official":{"repos":["UMBCvision/SSL-Backdoor"],"state":"official (archive's flag): 9 ran","n_ran":9,"n_constructed":0,"n_ran_no_instrument_failure":5,"n_unverified":2,"ran_from_kinds":["listed","official"]}}},{"url":"/paper/stealthy-backdoors-as-compression-artifacts","slug":"stealthy-backdoors-as-compression-artifacts","title":"Stealthy Backdoors as Compression Artifacts","date":"2021-04-30","arxiv_id":"2104.15129","repositories_listed":1,"syntology":{"n":10,"n_ran":7,"n_constructed":0,"n_ran_checked":7,"n_instrument":0,"n_unverified":3,"n_honours":0,"n_violates":0,"n_no_contract":7,"n_pointer_only":0,"phrase":"7 ran (of which 0 constructed an object rather than computing a result; 7 with no instrument failure: 0 honoured, 0 violated, 7 with no contract checked; 0 where Syntology's instrument failed) · 3 unverified","sample_list":"/paper/stealthy-backdoors-as-compression-artifacts#ran","syntology_url":"https://syntology.ai/paper/2104.15129","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2104.15129"}},"official":{"repos":["yulongtzzz/Stealthy-Backdoors-as-Compression-Artifacts"],"state":"official (archive's flag): 7 ran","n_ran":7,"n_constructed":0,"n_ran_no_instrument_failure":7,"n_unverified":3,"ran_from_kinds":["official"]}}},{"url":"/paper/targeted-attack-against-deep-neural-networks-1","slug":"targeted-attack-against-deep-neural-networks-1","title":"Targeted Attack against Deep Neural Networks via Flipping Limited Weight Bits","date":"2021-02-21","arxiv_id":"2102.10496","repositories_listed":2,"syntology":{"n":3,"n_ran":3,"n_constructed":0,"n_ran_checked":2,"n_instrument":1,"n_unverified":0,"n_honours":2,"n_violates":0,"n_no_contract":0,"n_pointer_only":3,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 2 with no instrument failure: 2 honoured, 0 violated, 0 with no contract checked; 1 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/targeted-attack-against-deep-neural-networks-1#ran","syntology_url":"https://syntology.ai/paper/2102.10496","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2102.10496"}},"official":{"repos":["jiawangbai/TA-LBF"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":2,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/wanet-imperceptible-warping-based-backdoor-1","slug":"wanet-imperceptible-warping-based-backdoor-1","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","date":"2021-02-20","arxiv_id":"2102.10369","repositories_listed":1,"syntology":{"n":2,"n_ran":2,"n_constructed":1,"n_ran_checked":2,"n_instrument":0,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":2,"n_pointer_only":2,"phrase":"2 ran (of which 1 constructed an object rather than computing a result; 2 with no instrument failure: 0 honoured, 0 violated, 2 with no contract checked; 0 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/wanet-imperceptible-warping-based-backdoor-1#ran","syntology_url":"https://syntology.ai/paper/2102.10369","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2102.10369"}},"official":{"repos":["VinAIResearch/Warping-based_Backdoor_Attack-release"],"state":"official (archive's flag): 2 ran","n_ran":2,"n_constructed":1,"n_ran_no_instrument_failure":2,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/deep-feature-space-trojan-attack-of-neural","slug":"deep-feature-space-trojan-attack-of-neural","title":"Deep Feature Space Trojan Attack of Neural Networks by Controlled Detoxification","date":"2020-12-21","arxiv_id":"2012.11212","repositories_listed":2,"syntology":{"n":2,"n_ran":2,"n_constructed":0,"n_ran_checked":0,"n_instrument":2,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":0,"phrase":"2 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 2 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/deep-feature-space-trojan-attack-of-neural#ran","syntology_url":"https://syntology.ai/paper/2012.11212","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2012.11212"}},"official":{"repos":["Megum1/DFST"],"state":"official (archive's flag): 2 ran","n_ran":2,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/onion-a-simple-and-effective-defense-against","slug":"onion-a-simple-and-effective-defense-against","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","date":"2020-11-20","arxiv_id":"2011.10369","repositories_listed":2,"syntology":{"n":4,"n_ran":3,"n_constructed":0,"n_ran_checked":0,"n_instrument":3,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":0,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 3 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/onion-a-simple-and-effective-defense-against#ran","syntology_url":"https://syntology.ai/paper/2011.10369","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2011.10369"}},"official":{"repos":["thunlp/ONION"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":1,"ran_from_kinds":["official"]}}},{"url":"/paper/backdoor-attack-against-speaker-verification","slug":"backdoor-attack-against-speaker-verification","title":"Backdoor Attack against Speaker Verification","date":"2020-10-22","arxiv_id":"2010.11607","repositories_listed":2,"syntology":{"n":5,"n_ran":4,"n_constructed":0,"n_ran_checked":4,"n_instrument":0,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":4,"n_pointer_only":0,"phrase":"4 ran (of which 0 constructed an object rather than computing a result; 4 with no instrument failure: 0 honoured, 0 violated, 4 with no contract checked; 0 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/backdoor-attack-against-speaker-verification#ran","syntology_url":"https://syntology.ai/paper/2010.11607","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2010.11607"}},"official":{"repos":["zhaitongqing233/Backdoor-attack-against-speaker-verification"],"state":"official (archive's flag): 4 ran","n_ran":4,"n_constructed":0,"n_ran_no_instrument_failure":4,"n_unverified":1,"ran_from_kinds":["official"]}}},{"url":"/paper/input-aware-dynamic-backdoor-attack","slug":"input-aware-dynamic-backdoor-attack","title":"Input-Aware Dynamic Backdoor Attack","date":"2020-10-16","arxiv_id":"2010.08138","repositories_listed":1,"syntology":{"n":3,"n_ran":2,"n_constructed":2,"n_ran_checked":2,"n_instrument":0,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":2,"n_pointer_only":0,"phrase":"2 ran (of which 2 constructed an object rather than computing a result; 2 with no instrument failure: 0 honoured, 0 violated, 2 with no contract checked; 0 where Syntology's instrument failed) · 1 unverified; every one of the 2 samples that ran constructed an object rather than computing a result","sample_list":"/paper/input-aware-dynamic-backdoor-attack#ran","syntology_url":"https://syntology.ai/paper/2010.08138","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2010.08138"}},"official":{"repos":["VinAIResearch/input-aware-backdoor-attack-release"],"state":"official (archive's flag): 2 ran","n_ran":2,"n_constructed":2,"n_ran_no_instrument_failure":2,"n_unverified":1,"ran_from_kinds":["official"]}}},{"url":"/paper/reflection-backdoor-a-natural-backdoor-attack","slug":"reflection-backdoor-a-natural-backdoor-attack","title":"Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networks","date":"2020-07-05","arxiv_id":"2007.02343","repositories_listed":3,"syntology":{"n":2,"n_ran":2,"n_constructed":0,"n_ran_checked":0,"n_instrument":2,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":2,"phrase":"2 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 2 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/reflection-backdoor-a-natural-backdoor-attack#ran","syntology_url":"https://syntology.ai/paper/2007.02343","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2007.02343"}},"official":null}},{"url":"/paper/backdoor-attacks-to-graph-neural-networks","slug":"backdoor-attacks-to-graph-neural-networks","title":"Backdoor Attacks to Graph Neural Networks","date":"2020-06-19","arxiv_id":"2006.11165","repositories_listed":2,"syntology":{"n":3,"n_ran":3,"n_constructed":0,"n_ran_checked":2,"n_instrument":1,"n_unverified":0,"n_honours":2,"n_violates":0,"n_no_contract":0,"n_pointer_only":3,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 2 with no instrument failure: 2 honoured, 0 violated, 0 with no contract checked; 1 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/backdoor-attacks-to-graph-neural-networks#ran","syntology_url":"https://syntology.ai/paper/2006.11165","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2006.11165"}},"official":{"repos":["zaixizhang/graphbackdoor"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":2,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/clean-label-backdoor-attacks-on-video","slug":"clean-label-backdoor-attacks-on-video","title":"Clean-Label Backdoor Attacks on Video Recognition Models","date":"2020-03-06","arxiv_id":"2003.03030","repositories_listed":1,"syntology":{"n":7,"n_ran":6,"n_constructed":0,"n_ran_checked":6,"n_instrument":0,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":6,"n_pointer_only":0,"phrase":"6 ran (of which 0 constructed an object rather than computing a result; 6 with no instrument failure: 0 honoured, 0 violated, 6 with no contract checked; 0 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/clean-label-backdoor-attacks-on-video#ran","syntology_url":"https://syntology.ai/paper/2003.03030","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2003.03030"}},"official":{"repos":["ShihaoZhaoZSH/Video-Backdoor-Attack"],"state":"official (archive's flag): 6 ran","n_ran":6,"n_constructed":0,"n_ran_no_instrument_failure":6,"n_unverified":1,"ran_from_kinds":["official"]}}},{"url":"/paper/hidden-trigger-backdoor-attacks","slug":"hidden-trigger-backdoor-attacks","title":"Hidden Trigger Backdoor Attacks","date":"2019-09-30","arxiv_id":"1910.00033","repositories_listed":3,"syntology":{"n":2,"n_ran":2,"n_constructed":0,"n_ran_checked":2,"n_instrument":0,"n_unverified":0,"n_honours":0,"n_violates":1,"n_no_contract":1,"n_pointer_only":0,"phrase":"2 ran (of which 0 constructed an object rather than computing a result; 2 with no instrument failure: 0 honoured, 1 violated, 1 with no contract checked; 0 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/hidden-trigger-backdoor-attacks#ran","syntology_url":"https://syntology.ai/paper/1910.00033","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1910.00033"}},"official":{"repos":["UMBCvision/Hidden-Trigger-Backdoor-Attacks"],"state":"official (archive's flag): 2 ran","n_ran":2,"n_constructed":0,"n_ran_no_instrument_failure":2,"n_unverified":0,"ran_from_kinds":["official"]}}}],"record_sha256":"0e6bc8419581b1f4bb3dab73a86950b5276d3021c6a8885617585c63bc4cf6a5","record_changed_at":"2026-09-28","record_changed_at_basis":"first_hashed"}