DB-COVIDNet: A Defense Method against Backdoor Attacks

Samaneh Shamshiri, Ki Jin Han and Insoo Sohn ()
Additional contact information
Samaneh Shamshiri: Division of Electronics & Electrical Engineering, Dongguk University, Seoul 04620, Republic of Korea
Ki Jin Han: Division of Electronics & Electrical Engineering, Dongguk University, Seoul 04620, Republic of Korea
Insoo Sohn: Division of Electronics & Electrical Engineering, Dongguk University, Seoul 04620, Republic of Korea

Mathematics, 2023, vol. 11, issue 20, 1-23

Abstract: With the emergence of COVID-19 disease in 2019, machine learning (ML) techniques, specifically deep learning networks (DNNs), played a key role in diagnosing the disease in the medical industry due to their superior performance. However, the computational cost of deep learning networks (DNNs) can be quite high, making it necessary to often outsource the training process to third-party providers, such as machine learning as a service (MLaaS). Therefore, careful consideration is required to achieve robustness in DNN-based systems against cyber-security attacks. In this paper, we propose a method called the dropout-bagging (DB-COVIDNet) algorithm, which works as a robust defense mechanism against poisoning backdoor attacks. In this model, the trigger-related features will be removed by the modified dropout algorithm, and then we will use the new voting method in the bagging algorithm to achieve the final results. We considered AC-COVIDNet as the main inducer of the bagging algorithm, which is an attention-guided contrastive convolutional neural network (CNN), and evaluated the performance of the proposed method with the malicious COVIDx dataset. The results demonstrated that DB-COVIDNet has strong robustness and can significantly reduce the effect of the backdoor attack. The proposed DB-COVIDNet nullifies backdoors before the attack has been activated, resulting in a tremendous reduction in the attack success rate from 99.5 % to 3 % with high accuracy on the clean data.

Keywords: convolutional neural network; backdoor attacks; COVID-19; bagging network; dropout algorithm; DB-COVIDNet (search for similar items in EconPapers)
JEL-codes: C (search for similar items in EconPapers)
Date: 2023
References: View complete reference list from CitEc
Citations:

Downloads: (external link)
https://www.mdpi.com/2227-7390/11/20/4236/pdf (application/pdf)
https://www.mdpi.com/2227-7390/11/20/4236/ (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:gam:jmathe:v:11:y:2023:i:20:p:4236-:d:1257078

Access Statistics for this article

Mathematics is currently edited by Ms. Emma He

More articles in Mathematics from MDPI
Bibliographic data for series maintained by MDPI Indexing Manager ().