Abstract:The backdoor attacks have posed a severe threat to deep neural networks (DNNs). Online training platforms and third-party model training providers are more vulnerable to backdoor attacks due to uncontrollable data sources, untrusted developers or unmonitorable training processes. Researchers have proposed to detect the backdoor in the well-trained models, and then remove them by some mitigation techniques, e.g., retraining and pruning. However, they are still limited from two aspects: (i) real-time - they cannot detect in time at the beginning of training due to their reliance on well-trained models; (ii) mitigation effect - the later discovery of backdoors usually leads to 1) deeper backdoors, 2) less effective mitigation, and 3) greater costs. To address these challenges, we rethink the evolution of the backdoor, and intend to cope with backdoors along with the online training process, that is to detect the backdoors sooner rather than later. We propose BackdoorTracer, a novel framework that detects the backdoor in the training phase. BackdoorTracer constructs the model into an equivalent graph based on the activated neural path during training, thereby detecting the backdoor through multiple graph metrics. BackdoorTracer can incorporate any existing backdoor mitigation approaches that require accessing training to stop the impact of backdoors as soon as possible. It differs from previous works in several key aspects: (i) lightweight - BackdoorTracer is independent of the training process, and thus it has little negative impact on the training efficiency and testing accuracy; (ii) generalizable - it works different modalities of data, models and different backdoor attacks. BackdoorTracer outperforms the state-of-the-art (SOTA) detection approaches in experiments on 5 modes, 10 models and 9 backdoor attack scenarios. Compared with the existing 5 backdoor detection methods, our method can detect backdoors earlier ( epochs) and higher detection rate (~ +10%), effectively improving the effectiveness of backdoor defense (ASR. ~ -78%, ACC. +47%). Finally, we make BackdoorTracer a plug-and-play backdoor detector, which enables real-time backdoor tracing in the training phase.

BACKRUNNER: Mitigating Smart Contract Attacks in the Real World

Midas: Mining Profitable Exploits in On-Chain Smart Contracts Via Feedback-Driven Fuzzing and Differential Analysis

Your Exploit is Mine: Instantly Synthesizing Counterattack Smart Contract

Nyx: Detecting Exploitable Front-Running Vulnerabilities in Smart Contracts

LookAhead: Preventing DeFi Attacks via Unveiling Adversarial Contracts

FIRST: FrontrunnIng Resilient Smart ConTracts

Towards Practical Deployment-Stage Backdoor Attack on Deep Neural Networks

An Ever-evolving Game: Evaluation of Real-world Attacks and Defenses in Ethereum Ecosystem.

Runtime Code Reuse Attacks: A Dynamic Framework Bypassing Fine-Grained Address Space Layout Randomization.

VULTRON: Catching Vulnerable Smart Contracts Once and for All

EShield: Protect Smart Contracts Against Reverse Engineering

Bet and Attack: Incentive Compatible Collaborative Attacks Using Smart Contracts

Delayed Packing Attack and Countermeasure Against Transaction Information Based Applications

Fast Preemption: Forward-Backward Cascade Learning for Efficient and Transferable Proactive Adversarial Defense

Uncover the Premeditated Attacks: Detecting Exploitable Reentrancy Vulnerabilities by Identifying Attacker Contracts

FRAD: Front-Running Attacks Detection on Ethereum using Ternary Classification Model

Unmasking Role-Play Attack Strategies in Exploiting Decentralized Finance (DeFi) Systems

FORAY: Towards Effective Attack Synthesis against Deep Logical Vulnerabilities in DeFi Protocols

Backdoor Online Tracing With Evolving Graphs

On Model Outsourcing Adaptive Attacks to Deep Learning Backdoor Defenses

Time-Travel Investigation: Towards Building A Scalable Attack Detection Framework on Ethereum