• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

Computer Engineering & Science ›› 2022, Vol. 44 ›› Issue (11): 1959-1968.

• Computer Network and Znformation Security • Previous Articles     Next Articles

A survey of backdoor implantation and detection techniques on deep neural network model

MA Ming-yuan,LI Hu,WANG Zi-bin,KUANG Xiao-hui   

  1. (National Key Laboratory of Science and Technology on Information System Security,
    Institute of System and Engineering,Academy of Military Sciences,Beijing 100101,China)
  • Received:2021-12-17 Revised:2022-03-04 Accepted:2022-11-25 Online:2022-11-25 Published:2022-11-25

Abstract: As one of the representative technologies of the rapid development of artificial intelligence, deep neural network has been applied more and more widely, and the security problems brought by it have gradually attracted attention. Existing studies mainly focus on how to efficiently construct diverse adversarial samples to cheat deep neural network models, and how to detect adversarial samples and reinforce deep neural network models. However, with the development of deep neural network models increasingly relying on open-source data sets, pre-trained models, computing frameworks and other third-party resources, the risk of models being implanted into backdoors is increasing. Starting from each link of the life cycle of deep neural network models, this paper summarizes the related technologies and methods of backdoor implantation and detection of deep neural network models, compares and analyzes the main characteristics and applicable scenarios of different methods, and prospects the future development direction of related technologies.

Key words: deep neural network, backdoor implantation, backdoor detection, artificial intelligence