Low-ASR Backdoors: Exploiting Attack Success Rate Reduction and Attacker-Defender Asymmetry

arXiv:2608.27288 · cs.CR · Submitted 2026-08-27 · Read on arXiv

cs.CR

Submitted: 2026-08-27

Updated: 2026-08-27

Terminology

• Attack Success Rate — 18× in this paper
• Accuracy — 10× in this paper · explained in 1 episode
• Robustness — 8× in this paper · explained in 5 episodes
• Consistency — 7× in this paper · explained in 3 episodes
• Attack Success Rate (ASR) — 6× in this paper · explained in 2 episodes
• Federated Learning — 5× in this paper · explained in 14 episodes
• Adversarial Attacks — 4× in this paper · explained in 1 episode
• Benchmark — 3× in this paper · explained in 2 episodes
• Transfer Learning — 3× in this paper · explained in 10 episodes
• Clustering — 2× in this paper · explained in 2 episodes
• Meta-learning — 2× in this paper · explained in 2 episodes
• Reinforcement Learning — 2× in this paper · explained in 4 episodes
• Spectral Signature — 2× in this paper · explained in 2 episodes
• Adversarial Robustness — 1× in this paper · explained in 3 episodes
• Benchmarking — 1× in this paper · explained in 3 episodes
• CVF International Conference on Computer Vision — 1× in this paper
• Embeddings — 1× in this paper · explained in 2 episodes
• International Conference on Learning Representations — 1× in this paper

Sources

• End to End Learning for Self-Driving Cars
• Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering
• Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning
• BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain
• SCALE-UP: An Efficient Black-box Input-level Backdoor Detection via Analyzing Scaled Prediction Consistency
• Explaining the Unexplainable: A Systematic Review of Explainable AI in Finance

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs