arXiv:2605.18908cs.CRcs.AI2026-05

通过随机探测模型头部,快速无数据检测后门攻击

Fast and Lightweight Backdoor Detection via Head Random Probing

论文配图:Fast and Lightweight Backdoor Detection via Head Random Probing
图 1 · 摘自论文原文
  • 用随机潜在向量探测模型输出头,分析分类响应分布异常
  • 在6000+个受控模型上实现99.03%检出率、2.11%误报率
  • 无需真实数据或梯度,检测耗时仅12.69毫秒/模型

深度神经网络仍极易遭受后门攻击。现有训练后检测方法常需干净数据或代理数据、梯度信息或迭代触发重建,导致计算成本高,在实际模型审计场景中鲁棒性差。本文提出HTell,一种基于头部随机探测的快速轻量级无数据后门检测方法。不同于重建多种触发模式,HTell通过分析模型输出头在随机潜空间探测下的统一表现:受控模型在随机探测下对目标类别的响应会呈现异常集中。该方法生成与架构适配的随机潜空间探测向量,直接输入模型头部,通过分析类别级响应统计完成检测,无需真实数据、代理数据、梯度或参数优化。我们在包含超过6000个受控模型和700个干净模型的大规模基准上评估,覆盖4个数据集、14种模型架构和21类后门攻击。HTell实现99.03%真阳性率和2.11%假阳性率,单模型检测延迟仅为12.69毫秒,相较代表性基于梯度的检测方法提速超3万倍。结果表明,头部随机探测为大规模无数据后门模型审计提供了准确、鲁棒且高效的解决方案。

原文摘要 · Abstract (English)

Deep neural networks (DNNs) remain critically vulnerable to backdoor attacks. Existing post-training detectors often require clean or surrogate data, gradients, or iterative trigger reconstruction, leading to high computational costs and limited robustness under practical model-auditing scenarios. In this paper, we propose HTell, a fast and lightweight data-free backdoor detector based on head random probing. Instead of reconstructing diverse trigger patterns, HTell inspects their unified manifestation in the prediction head: backdoored models tend to exhibit abnormal response concentration on the target class under random latent probes. HTell generates architecture-aware random latent probes, feeds them directly into the model head, and detects backdoors by analyzing class-wise response statistics, without accessing real or surrogate data, model gradients, or parameter optimization. We evaluate HTell on a large-scale benchmark containing more than 6,000 backdoored models and over 700 clean models, covering 4 datasets, 14 architectures, and 21 types of backdoor attacks. HTell achieves 99.03% true positive rate and 2.11% false positive rate with only 12.69 ms/model detection latency, reducing the time cost by over 30,000$\times$ compared with representative gradient-based detectors. These results demonstrate that head random probing provides an accurate, robust, and efficient solution for large-scale data-free backdoor model auditing.

后门检测无数据高效模型安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。