250 citations · 444 across the 12 of their papers we have counts for
7 papers · 1 filter
On the Credibility of Backdoor Attacks Against Object Detectors in the Physical World
Bao Gia Doan, Dang Quang Nguyen, Callum Lindquist +7
Object detectors are vulnerable to backdoor attacks. In contrast to classifiers, detectors possess unique characteristics, architecturally and in task execution; often operating in…
Bayesian Learned Models Can Detect Adversarial Malware For Free
Bao Gia Doan, Dang Quang Nguyen, Paul Montague +6
The vulnerability of machine learning-based malware detectors to adversarial attacks has prompted the need for robust solutions. Adversarial training is an effective method but is…
Feature-Space Bayesian Adversarial Learning Improved Malware Detector Robustness
Bao Gia Doan, Shuiqiao Yang, Paul Montague +6
We present a new algorithm to train a robust malware detector. Modern malware detectors rely on machine learning algorithms. Now, the adversarial objective is to devise alterations…
Transferable Graph Backdoor Attack
Shuiqiao Yang, Bao Gia Doan, Paul Montague +5
Graph Neural Networks (GNNs) have achieved tremendous success in many graph mining tasks benefitting from the message passing strategy that fuses the local structure and node featu…
Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review
Yansong Gao, Bao Gia Doan, Zhi Zhang +5
This work provides the community with a timely comprehensive review of backdoor attacks and countermeasures on deep learning. According to the attacker's capability and affected st…
Design and Evaluation of a Multi-Domain Trojan Detection Method on Deep Neural Networks
Yansong Gao, Yeonjae Kim, Bao Gia Doan +5
This work corroborates a run-time Trojan detection method exploiting STRong Intentional Perturbation of inputs, is a multi-domain Trojan detection defence across Vision, Text and A…
Februus: Input Purification Defense Against Trojan Attacks on Deep Neural Network Systems
Bao Gia Doan, Ehsan Abbasnejad, Damith C. Ranasinghe
We propose Februus; a new idea to neutralize highly potent and insidious Trojan attacks on Deep Neural Network (DNN) systems at run-time. In Trojan attacks, an adversary activates…