{"about":{"non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","site":"https://codewithpapers.app","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page","syntology":{"site":"https://syntology.ai","developers":"https://syntology.ai/developers","mcp":{"server":"https://syntology.ai/mcp","transport":"streamable-http","server_card":"https://syntology.ai/.well-known/mcp/server-card.json","auth":{"type":"trial token, no account","trial_token":"https://syntology.ai/api/oauth/trial/token","method":"POST","docs":"https://syntology.ai/developers"}},"have":"https://syntology.ai/api/graph/have?x=<method, arXiv id or title> (free, answers coverage only)","paper_base":"https://syntology.ai/paper/","atlas_base":"https://app.syntology.ai/?focus="},"machine_readable":[{"url":"https://codewithpapers.app/llms.txt","what":"the machine catalog: every machine-readable file, counted"},{"url":"https://codewithpapers.app/index/manifest.json","what":"paper-to-code index by arXiv id, with Syntology's counts"},{"url":"https://codewithpapers.app/search/manifest.json","what":"site search index (titles, authors) and its files"},{"url":"https://codewithpapers.app/download","what":"bulk files: Syntology's layer, described there"},{"url":"https://codewithpapers.app/build_manifest.json","what":"the build record: inputs, counts, exclusions, probes"}]},"url":"/task/backdoor-defense/papers/ran/1","list_of":"/task/backdoor-defense","task":"backdoor defense","archive":{"snapshot":"2025-07-28"},"key_notes":{"n_ran_checked":"legacy name, kept unchanged so existing readers do not break: it counts the samples that ran with no instrument failure (honoured, violated, and ran with no contract checked); it does not mean a contract was checked, and the pages print it as 'K with no instrument failure', not 'K checked'","n_constructed":"a sub-count of the samples that ran, never subtracted from them and never a failure: an executed sample whose run returned an instance of its own class (fixture_out_type equals the entry name): the run built an object and did not compute a result (Syntology's RAN record, counts.constructed)"},"syntology_read_at":"2026-09-28T10:30:06+00:00","order":"ran","order_definition":"only papers where Syntology ran at least one harvested sample; date (newest first), ties by arXiv id","caption":"We ran code from the paper's repository; we did not run it on this task or check it against the task's benchmarks.","absence":"A paper missing from this list is not a recorded non-run: it may have no arXiv id, no harvested code, or only samples that have not run yet.","page":1,"pages_in_order":1,"rows_per_page":100,"rows":[1,26],"of":26,"counts":{"archive_papers_tagged":131,"with_a_code_link":59,"where_syntology_ran_a_sample":26,"not_listed_spam_title":0,"listed":131,"listed_where_code_ran":26,"where_syntology_ran_a_sample_split":{"with_a_run_with_no_instrument_failure":21,"every_run_a_failure_of_syntologys_instrument":5,"listed_with_a_run_with_no_instrument_failure":21,"listed_every_run_a_failure_of_syntologys_instrument":5,"filter":{"states":["a run with no instrument failure","any run, instrument failures included"],"default":"a run with no instrument failure","note":"on the 'only where code ran' pages the default hides, in the browser, the rows where every run was a failure of Syntology's instrument; the second state shows them again. Rows are hidden, never re-ordered; these twins list every row"}},"definition":"distinct papers the archive tags; 'where Syntology ran a sample' counts papers with at least one harvested sample that ran, which is not a correctness claim"},"first_page":"/task/backdoor-defense/papers/ran/1","prev":null,"next":null,"papers":[{"url":"/paper/refine-inversion-free-backdoor-defense-via","slug":"refine-inversion-free-backdoor-defense-via","title":"REFINE: Inversion-Free Backdoor Defense via Model Reprogramming","date":"2025-02-22","arxiv_id":"2502.18508","repositories_listed":2,"syntology":{"n":10,"n_ran":5,"n_constructed":1,"n_ran_checked":4,"n_instrument":1,"n_unverified":5,"n_honours":0,"n_violates":0,"n_no_contract":4,"n_pointer_only":10,"phrase":"5 ran (of which 1 constructed an object rather than computing a result; 4 with no instrument failure: 0 honoured, 0 violated, 4 with no contract checked; 1 where Syntology's instrument failed) · 5 unverified","sample_list":"/paper/refine-inversion-free-backdoor-defense-via#ran","syntology_url":"https://syntology.ai/paper/2502.18508","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2502.18508"}},"official":{"repos":["thuyimingli/backdoorbox","whitolfchen/refine"],"state":"official (archive's flag): 5 ran","n_ran":5,"n_constructed":1,"n_ran_no_instrument_failure":4,"n_unverified":5,"ran_from_kinds":["official"]}}},{"url":"/paper/crow-eliminating-backdoors-from-large","slug":"crow-eliminating-backdoors-from-large","title":"CROW: Eliminating Backdoors from Large Language Models via Internal Consistency Regularization","date":"2024-11-18","arxiv_id":"2411.12768","repositories_listed":1,"syntology":{"n":2,"n_ran":2,"n_constructed":0,"n_ran_checked":1,"n_instrument":1,"n_unverified":0,"n_honours":1,"n_violates":0,"n_no_contract":0,"n_pointer_only":0,"phrase":"2 ran (of which 0 constructed an object rather than computing a result; 1 with no instrument failure: 1 honoured, 0 violated, 0 with no contract checked; 1 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/crow-eliminating-backdoors-from-large#ran","syntology_url":"https://syntology.ai/paper/2411.12768","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2411.12768"}},"official":{"repos":["naymyatmin/crow"],"state":"official (archive's flag): 2 ran","n_ran":2,"n_constructed":0,"n_ran_no_instrument_failure":1,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/uncovering-explaining-and-mitigating-the","slug":"uncovering-explaining-and-mitigating-the","title":"Uncovering, Explaining, and Mitigating the Superficial Safety of Backdoor Defense","date":"2024-10-13","arxiv_id":"2410.09838","repositories_listed":2,"syntology":{"n":1,"n_ran":1,"n_constructed":0,"n_ran_checked":1,"n_instrument":0,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":1,"n_pointer_only":1,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 1 with no instrument failure: 0 honoured, 0 violated, 1 with no contract checked; 0 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/uncovering-explaining-and-mitigating-the#ran","syntology_url":"https://syntology.ai/paper/2410.09838","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2410.09838"}},"official":{"repos":["aisafety-hkust/stable_backdoor_purification"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":1,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/robustness-inspired-defense-against-backdoor","slug":"robustness-inspired-defense-against-backdoor","title":"Robustness Inspired Graph Backdoor Defense","date":"2024-06-14","arxiv_id":"2406.09836","repositories_listed":0,"syntology":{"n":3,"n_ran":3,"n_constructed":0,"n_ran_checked":3,"n_instrument":0,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":3,"n_pointer_only":3,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 3 with no instrument failure: 0 honoured, 0 violated, 3 with no contract checked; 0 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/robustness-inspired-defense-against-backdoor#ran","syntology_url":"https://syntology.ai/paper/2406.09836","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2406.09836"}},"official":null}},{"url":"/paper/mitigating-backdoor-attack-by-injecting","slug":"mitigating-backdoor-attack-by-injecting","title":"Mitigating Backdoor Attack by Injecting Proactive Defensive Backdoor","date":"2024-05-25","arxiv_id":"2405.16112","repositories_listed":2,"syntology":{"n":5,"n_ran":4,"n_constructed":0,"n_ran_checked":3,"n_instrument":1,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":3,"n_pointer_only":5,"phrase":"4 ran (of which 0 constructed an object rather than computing a result; 3 with no instrument failure: 0 honoured, 0 violated, 3 with no contract checked; 1 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/mitigating-backdoor-attack-by-injecting#ran","syntology_url":"https://syntology.ai/paper/2405.16112","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2405.16112"}},"official":{"repos":["shawkui/Proactive_Defensive_Backdoor","sclbd/backdoorbench"],"state":"official (archive's flag): 4 ran","n_ran":4,"n_constructed":0,"n_ran_no_instrument_failure":3,"n_unverified":1,"ran_from_kinds":["official"]}}},{"url":"/paper/badacts-a-universal-backdoor-defense-in-the","slug":"badacts-a-universal-backdoor-defense-in-the","title":"BadActs: A Universal Backdoor Defense in the Activation Space","date":"2024-05-18","arxiv_id":"2405.11227","repositories_listed":1,"syntology":{"n":3,"n_ran":3,"n_constructed":0,"n_ran_checked":3,"n_instrument":0,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":3,"n_pointer_only":0,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 3 with no instrument failure: 0 honoured, 0 violated, 3 with no contract checked; 0 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/badacts-a-universal-backdoor-defense-in-the#ran","syntology_url":"https://syntology.ai/paper/2405.11227","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2405.11227"}},"official":{"repos":["clearloveclearlove/BadActs"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":3,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/backdoor-secrets-unveiled-identifying","slug":"backdoor-secrets-unveiled-identifying","title":"Backdoor Secrets Unveiled: Identifying Backdoor Data with Optimized Scaled Prediction Consistency","date":"2024-03-15","arxiv_id":"2403.10717","repositories_listed":1,"syntology":{"n":5,"n_ran":4,"n_constructed":0,"n_ran_checked":1,"n_instrument":3,"n_unverified":1,"n_honours":1,"n_violates":0,"n_no_contract":0,"n_pointer_only":5,"phrase":"4 ran (of which 0 constructed an object rather than computing a result; 1 with no instrument failure: 1 honoured, 0 violated, 0 with no contract checked; 3 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/backdoor-secrets-unveiled-identifying#ran","syntology_url":"https://syntology.ai/paper/2403.10717","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2403.10717"}},"official":{"repos":["optml-group/backdoormspc"],"state":"official (archive's flag): 4 ran","n_ran":4,"n_constructed":0,"n_ran_no_instrument_failure":1,"n_unverified":1,"ran_from_kinds":["official"]}}},{"url":"/paper/watch-out-for-your-agents-investigating","slug":"watch-out-for-your-agents-investigating","title":"Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents","date":"2024-02-17","arxiv_id":"2402.11208","repositories_listed":1,"syntology":{"n":2,"n_ran":2,"n_constructed":0,"n_ran_checked":0,"n_instrument":2,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":2,"phrase":"2 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 2 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/watch-out-for-your-agents-investigating#ran","syntology_url":"https://syntology.ai/paper/2402.11208","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2402.11208"}},"official":{"repos":["lancopku/agent-backdoor-attacks"],"state":"official (archive's flag): 2 ran","n_ran":2,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/spy-watermark-robust-invisible-watermarking","slug":"spy-watermark-robust-invisible-watermarking","title":"Spy-Watermark: Robust Invisible Watermarking for Backdoor Attack","date":"2024-01-04","arxiv_id":"2401.02031","repositories_listed":1,"syntology":{"n":9,"n_ran":5,"n_constructed":0,"n_ran_checked":5,"n_instrument":0,"n_unverified":4,"n_honours":0,"n_violates":0,"n_no_contract":5,"n_pointer_only":9,"phrase":"5 ran (of which 0 constructed an object rather than computing a result; 5 with no instrument failure: 0 honoured, 0 violated, 5 with no contract checked; 0 where Syntology's instrument failed) · 4 unverified","sample_list":"/paper/spy-watermark-robust-invisible-watermarking#ran","syntology_url":"https://syntology.ai/paper/2401.02031","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2401.02031"}},"official":{"repos":["rfww/spy-watermark"],"state":"official (archive's flag): 5 ran","n_ran":5,"n_constructed":0,"n_ran_no_instrument_failure":5,"n_unverified":4,"ran_from_kinds":["official"]}}},{"url":"/paper/from-trojan-horses-to-castle-walls-unveiling","slug":"from-trojan-horses-to-castle-walls-unveiling","title":"From Trojan Horses to Castle Walls: Unveiling Bilateral Data Poisoning Effects in Diffusion Models","date":"2023-11-04","arxiv_id":"2311.02373","repositories_listed":1,"syntology":{"n":4,"n_ran":4,"n_constructed":0,"n_ran_checked":2,"n_instrument":2,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":2,"n_pointer_only":4,"phrase":"4 ran (of which 0 constructed an object rather than computing a result; 2 with no instrument failure: 0 honoured, 0 violated, 2 with no contract checked; 2 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/from-trojan-horses-to-castle-walls-unveiling#ran","syntology_url":"https://syntology.ai/paper/2311.02373","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2311.02373"}},"official":{"repos":["optml-group/bibaddiff"],"state":"official (archive's flag): 4 ran","n_ran":4,"n_constructed":0,"n_ran_no_instrument_failure":2,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/backdoor-defense-with-non-adversarial","slug":"backdoor-defense-with-non-adversarial","title":"Beating Backdoor Attack at Its Own Game","date":"2023-07-28","arxiv_id":"2307.15539","repositories_listed":2,"syntology":{"n":9,"n_ran":5,"n_constructed":0,"n_ran_checked":5,"n_instrument":0,"n_unverified":4,"n_honours":0,"n_violates":0,"n_no_contract":5,"n_pointer_only":9,"phrase":"5 ran (of which 0 constructed an object rather than computing a result; 5 with no instrument failure: 0 honoured, 0 violated, 5 with no contract checked; 0 where Syntology's instrument failed) · 4 unverified","sample_list":"/paper/backdoor-defense-with-non-adversarial#ran","syntology_url":"https://syntology.ai/paper/2307.15539","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2307.15539"}},"official":{"repos":["damianliumin/non-adversarial_backdoor","minliu01/non-adversarial_backdoor"],"state":"official (archive's flag): 5 ran","n_ran":5,"n_constructed":0,"n_ran_no_instrument_failure":5,"n_unverified":4,"ran_from_kinds":["official"]}}},{"url":"/paper/shared-adversarial-unlearning-backdoor","slug":"shared-adversarial-unlearning-backdoor","title":"Shared Adversarial Unlearning: Backdoor Mitigation by Unlearning Shared Adversarial Examples","date":"2023-07-20","arxiv_id":"2307.10562","repositories_listed":2,"syntology":{"n":4,"n_ran":4,"n_constructed":0,"n_ran_checked":3,"n_instrument":1,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":3,"n_pointer_only":4,"phrase":"4 ran (of which 0 constructed an object rather than computing a result; 3 with no instrument failure: 0 honoured, 0 violated, 3 with no contract checked; 1 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/shared-adversarial-unlearning-backdoor#ran","syntology_url":"https://syntology.ai/paper/2307.10562","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2307.10562"}},"official":{"repos":["shawkui/Shared_Adversarial_Unlearning"],"state":"official (archive's flag): 4 ran","n_ran":4,"n_constructed":0,"n_ran_no_instrument_failure":3,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/text-to-image-diffusion-models-can-be-easily","slug":"text-to-image-diffusion-models-can-be-easily","title":"Text-to-Image Diffusion Models can be Easily Backdoored through Multimodal Data Poisoning","date":"2023-05-07","arxiv_id":"2305.04175","repositories_listed":1,"syntology":{"n":4,"n_ran":2,"n_constructed":0,"n_ran_checked":2,"n_instrument":0,"n_unverified":2,"n_honours":0,"n_violates":0,"n_no_contract":2,"n_pointer_only":0,"phrase":"2 ran (of which 0 constructed an object rather than computing a result; 2 with no instrument failure: 0 honoured, 0 violated, 2 with no contract checked; 0 where Syntology's instrument failed) · 2 unverified","sample_list":"/paper/text-to-image-diffusion-models-can-be-easily#ran","syntology_url":"https://syntology.ai/paper/2305.04175","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2305.04175"}},"official":{"repos":["sf-zhai/badt2i"],"state":"official (archive's flag): 2 ran","n_ran":2,"n_constructed":0,"n_ran_no_instrument_failure":2,"n_unverified":2,"ran_from_kinds":["official"]}}},{"url":"/paper/mask-and-restore-blind-backdoor-defense-at","slug":"mask-and-restore-blind-backdoor-defense-at","title":"Mask and Restore: Blind Backdoor Defense at Test Time with Masked Autoencoder","date":"2023-03-27","arxiv_id":"2303.15564","repositories_listed":1,"syntology":{"n":15,"n_ran":8,"n_constructed":0,"n_ran_checked":8,"n_instrument":0,"n_unverified":7,"n_honours":1,"n_violates":0,"n_no_contract":7,"n_pointer_only":3,"phrase":"8 ran (of which 0 constructed an object rather than computing a result; 8 with no instrument failure: 1 honoured, 0 violated, 7 with no contract checked; 0 where Syntology's instrument failed) · 7 unverified","sample_list":"/paper/mask-and-restore-blind-backdoor-defense-at#ran","syntology_url":"https://syntology.ai/paper/2303.15564","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2303.15564"}},"official":{"repos":["tsun/bdmae"],"state":"official (archive's flag): 8 ran","n_ran":8,"n_constructed":0,"n_ran_no_instrument_failure":8,"n_unverified":7,"ran_from_kinds":["official"]}}},{"url":"/paper/black-box-backdoor-defense-via-zero-shot-1","slug":"black-box-backdoor-defense-via-zero-shot-1","title":"Black-box Backdoor Defense via Zero-shot Image Purification","date":"2023-03-21","arxiv_id":"2303.12175","repositories_listed":1,"syntology":{"n":3,"n_ran":3,"n_constructed":0,"n_ran_checked":0,"n_instrument":3,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":0,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 3 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/black-box-backdoor-defense-via-zero-shot-1#ran","syntology_url":"https://syntology.ai/paper/2303.12175","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2303.12175"}},"official":{"repos":["sycny/zip"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/asset-robust-backdoor-data-detection-across-a","slug":"asset-robust-backdoor-data-detection-across-a","title":"ASSET: Robust Backdoor Data Detection Across a Multiplicity of Deep Learning Paradigms","date":"2023-02-22","arxiv_id":"2302.11408","repositories_listed":1,"syntology":{"n":3,"n_ran":3,"n_constructed":0,"n_ran_checked":1,"n_instrument":2,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":1,"n_pointer_only":2,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 1 with no instrument failure: 0 honoured, 0 violated, 1 with no contract checked; 2 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/asset-robust-backdoor-data-detection-across-a#ran","syntology_url":"https://syntology.ai/paper/2302.11408","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2302.11408"}},"official":{"repos":["ruoxi-jia-group/asset"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":1,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/backdoor-attacks-for-remote-sensing-data-with","slug":"backdoor-attacks-for-remote-sensing-data-with","title":"Backdoor Attacks for Remote Sensing Data with Wavelet Transform","date":"2022-11-15","arxiv_id":"2211.08044","repositories_listed":1,"syntology":{"n":10,"n_ran":8,"n_constructed":0,"n_ran_checked":6,"n_instrument":2,"n_unverified":2,"n_honours":0,"n_violates":0,"n_no_contract":6,"n_pointer_only":1,"phrase":"8 ran (of which 0 constructed an object rather than computing a result; 6 with no instrument failure: 0 honoured, 0 violated, 6 with no contract checked; 2 where Syntology's instrument failed) · 2 unverified","sample_list":"/paper/backdoor-attacks-for-remote-sensing-data-with#ran","syntology_url":"https://syntology.ai/paper/2211.08044","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2211.08044"}},"official":{"repos":["ndraeger/waba"],"state":"official (archive's flag): 8 ran","n_ran":8,"n_constructed":0,"n_ran_no_instrument_failure":6,"n_unverified":2,"ran_from_kinds":["official"]}}},{"url":"/paper/backdoor-defense-via-suppressing-model","slug":"backdoor-defense-via-suppressing-model","title":"Backdoor Defense via Suppressing Model Shortcuts","date":"2022-11-02","arxiv_id":"2211.05631","repositories_listed":1,"syntology":{"n":3,"n_ran":3,"n_constructed":0,"n_ran_checked":1,"n_instrument":2,"n_unverified":0,"n_honours":1,"n_violates":0,"n_no_contract":0,"n_pointer_only":3,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 1 with no instrument failure: 1 honoured, 0 violated, 0 with no contract checked; 2 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/backdoor-defense-via-suppressing-model#ran","syntology_url":"https://syntology.ai/paper/2211.05631","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2211.05631"}},"official":{"repos":["20000yshust/Backdoor-Defense-Via-Suppressing-Model-Shortcuts"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":1,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/flip-a-provable-defense-framework-for","slug":"flip-a-provable-defense-framework-for","title":"FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning","date":"2022-10-23","arxiv_id":"2210.12873","repositories_listed":1,"syntology":{"n":1,"n_ran":1,"n_constructed":0,"n_ran_checked":0,"n_instrument":1,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":1,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 1 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/flip-a-provable-defense-framework-for#ran","syntology_url":"https://syntology.ai/paper/2210.12873","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2210.12873"}},"official":{"repos":["KaiyuanZh/FLIP"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/expose-backdoors-on-the-way-a-feature-based","slug":"expose-backdoors-on-the-way-a-feature-based","title":"Expose Backdoors on the Way: A Feature-Based Efficient Defense against Textual Backdoor Attacks","date":"2022-10-14","arxiv_id":"2210.07907","repositories_listed":1,"syntology":{"n":6,"n_ran":6,"n_constructed":0,"n_ran_checked":1,"n_instrument":5,"n_unverified":0,"n_honours":1,"n_violates":0,"n_no_contract":0,"n_pointer_only":0,"phrase":"6 ran (of which 0 constructed an object rather than computing a result; 1 with no instrument failure: 1 honoured, 0 violated, 0 with no contract checked; 5 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/expose-backdoors-on-the-way-a-feature-based#ran","syntology_url":"https://syntology.ai/paper/2210.07907","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2210.07907"}},"official":{"repos":["lancopku/dan"],"state":"official (archive's flag): 6 ran","n_ran":6,"n_constructed":0,"n_ran_no_instrument_failure":1,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/universal-post-training-backdoor-detection","slug":"universal-post-training-backdoor-detection","title":"MM-BD: Post-Training Detection of Backdoor Attacks with Arbitrary Backdoor Pattern Types Using a Maximum Margin Statistic","date":"2022-05-13","arxiv_id":"2205.06900","repositories_listed":1,"syntology":{"n":1,"n_ran":1,"n_constructed":0,"n_ran_checked":1,"n_instrument":0,"n_unverified":0,"n_honours":1,"n_violates":0,"n_no_contract":0,"n_pointer_only":1,"phrase":"1 ran (of which 0 constructed an object rather than computing a result; 1 with no instrument failure: 1 honoured, 0 violated, 0 with no contract checked; 0 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/universal-post-training-backdoor-detection#ran","syntology_url":"https://syntology.ai/paper/2205.06900","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2205.06900"}},"official":{"repos":["wanghangpsu/mm-bd"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":0,"n_ran_no_instrument_failure":1,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/eliminating-backdoor-triggers-for-deep-neural","slug":"eliminating-backdoor-triggers-for-deep-neural","title":"Eliminating Backdoor Triggers for Deep Neural Networks Using Attention Relation Graph Distillation","date":"2022-04-21","arxiv_id":"2204.09975","repositories_listed":1,"syntology":{"n":7,"n_ran":7,"n_constructed":6,"n_ran_checked":7,"n_instrument":0,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":7,"n_pointer_only":0,"phrase":"7 ran (of which 6 constructed an object rather than computing a result; 7 with no instrument failure: 0 honoured, 0 violated, 7 with no contract checked; 0 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/eliminating-backdoor-triggers-for-deep-neural#ran","syntology_url":"https://syntology.ai/paper/2204.09975","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2204.09975"}},"official":{"repos":["BililiCode/ARGD"],"state":"official (archive's flag): 7 ran","n_ran":7,"n_constructed":6,"n_ran_no_instrument_failure":7,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/backdoor-defense-via-decoupling-the-training-1","slug":"backdoor-defense-via-decoupling-the-training-1","title":"Backdoor Defense via Decoupling the Training Process","date":"2022-02-05","arxiv_id":"2202.03423","repositories_listed":3,"syntology":{"n":1,"n_ran":1,"n_constructed":1,"n_ran_checked":1,"n_instrument":0,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":1,"n_pointer_only":1,"phrase":"1 ran (of which 1 constructed an object rather than computing a result; 1 with no instrument failure: 0 honoured, 0 violated, 1 with no contract checked; 0 where Syntology's instrument failed) · 0 unverified; the one sample that ran constructed an object rather than computing a result","sample_list":"/paper/backdoor-defense-via-decoupling-the-training-1#ran","syntology_url":"https://syntology.ai/paper/2202.03423","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2202.03423"}},"official":{"repos":["sclbd/dbd"],"state":"official (archive's flag): 1 ran","n_ran":1,"n_constructed":1,"n_ran_no_instrument_failure":1,"n_unverified":0,"ran_from_kinds":["official"]}}},{"url":"/paper/fiba-frequency-injection-based-backdoor","slug":"fiba-frequency-injection-based-backdoor","title":"FIBA: Frequency-Injection based Backdoor Attack in Medical Image Analysis","date":"2021-12-02","arxiv_id":"2112.01148","repositories_listed":3,"syntology":{"n":2,"n_ran":2,"n_constructed":0,"n_ran_checked":0,"n_instrument":2,"n_unverified":0,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":0,"phrase":"2 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 2 where Syntology's instrument failed) · 0 unverified","sample_list":"/paper/fiba-frequency-injection-based-backdoor#ran","syntology_url":"https://syntology.ai/paper/2112.01148","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2112.01148"}},"official":{"repos":["hazardfy/fiba"],"state":"community repositories only","n_ran":0,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":0,"ran_from_kinds":["listed"]}}},{"url":"/paper/onion-a-simple-and-effective-defense-against","slug":"onion-a-simple-and-effective-defense-against","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","date":"2020-11-20","arxiv_id":"2011.10369","repositories_listed":2,"syntology":{"n":4,"n_ran":3,"n_constructed":0,"n_ran_checked":0,"n_instrument":3,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":0,"n_pointer_only":0,"phrase":"3 ran (of which 0 constructed an object rather than computing a result; 0 with no instrument failure: 0 honoured, 0 violated, 0 with no contract checked; 3 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/onion-a-simple-and-effective-defense-against#ran","syntology_url":"https://syntology.ai/paper/2011.10369","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2011.10369"}},"official":{"repos":["thunlp/ONION"],"state":"official (archive's flag): 3 ran","n_ran":3,"n_constructed":0,"n_ran_no_instrument_failure":0,"n_unverified":1,"ran_from_kinds":["official"]}}},{"url":"/paper/clean-label-backdoor-attacks-on-video","slug":"clean-label-backdoor-attacks-on-video","title":"Clean-Label Backdoor Attacks on Video Recognition Models","date":"2020-03-06","arxiv_id":"2003.03030","repositories_listed":1,"syntology":{"n":7,"n_ran":6,"n_constructed":0,"n_ran_checked":6,"n_instrument":0,"n_unverified":1,"n_honours":0,"n_violates":0,"n_no_contract":6,"n_pointer_only":0,"phrase":"6 ran (of which 0 constructed an object rather than computing a result; 6 with no instrument failure: 0 honoured, 0 violated, 6 with no contract checked; 0 where Syntology's instrument failed) · 1 unverified","sample_list":"/paper/clean-label-backdoor-attacks-on-video#ran","syntology_url":"https://syntology.ai/paper/2003.03030","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2003.03030"}},"official":{"repos":["ShihaoZhaoZSH/Video-Backdoor-Attack"],"state":"official (archive's flag): 6 ran","n_ran":6,"n_constructed":0,"n_ran_no_instrument_failure":6,"n_unverified":1,"ran_from_kinds":["official"]}}}],"record_sha256":"964ca8dce16eb793967f0c04628655e9be4c8119a179ea2529e1e9d966a78a34","record_changed_at":"2026-09-28","record_changed_at_basis":"first_hashed"}