针对深度代码模型的混合后门攻击
1Department of Information and Network Security, The State Information Center, Beijing, China.
PloS one
|December 8, 2025
概括
本研究为深度代码模型引入了混合后门攻击,将函数签名和死代码结合起来. 这种新的方法提高了攻击的有效性和隐形性,优于以前的单触发方法.
科学领域:
- 人工智能的人工智能
- 软件安全 软件安全
- 机器学习 机器学习
背景情况:
- 深度代码模型容易受到后门攻击.
- 现有的单触发式攻击缺乏隐形性,并且很容易受到防御的影响.
研究的目的:
- 为深度代码模型提出一种新的混合后门攻击方法.
- 通过结合多种触发器类型来提高攻击效率和隐身性.
主要方法:
- 这是一种混合攻击,它结合了函数签名特性和死代码插入作为触发器.
- 利用互补的触发效应进行协同增强.
- 实验评估中毒率最小的试验评估.
主要成果:
- 混合方法实现了高攻击成功率 (ASR),显著超过单触发方法.
- 这种方法有效地规避了基于光谱特征的防御.
- 保持对正常模型功能的影响最小.
结论:
- 复杂的混合后门攻击对深度代码模型构成重大威胁.
- 迫切需要专门的防御机制来应对这些先进的威胁.
相关概念视频
Leaky Scanning
5.6K
During most eukaryotic translation processes, the small 40S ribosome subunit scans an mRNA from its 5' end until it encounters the first start AUG codon. The large 60S ribosomal subunit then joins the smaller one to initiate protein synthesis. The location of the translation initiation is largely determined by the nucleotides near the start codon as there may be multiple translation initiation sites present on the mRNA. Marilyn Kozak discovered that the sequence RCCAUGG (where R...
5.6K
Clearance Models: Compartment Models
288
Clearance measures drug elimination from the central compartment, including plasma and highly perfused organs like kidneys and liver. Its calculation varies depending on pharmacokinetic models and administration routes. The one-compartment model, for instance, portrays the pharmacokinetics of polar drugs such as aminoglycoside antibiotics administered intravenously and readily excreted in urine. In this case, clearance is influenced by the terminal rate constant (λz) and the total volume...
288
Masking and Demasking Agents
3.4K
EDTA titrations may necessitate masking and demasking agents to temporarily protect a particular metal ion in a mixture from the EDTA reaction. These agents facilitate the sequential analysis of the metal ions by forming stable complexes with some—but not all—metal ions during certain steps.
There are many masking agents, such as cyanide, fluoride, triethanolamine, thiourea, and 2,3-bis(sulfanyl)propan-1-ol (formerly 2,3-dimercapto-1-propanol), with the masking agent chosen based on...
There are many masking agents, such as cyanide, fluoride, triethanolamine, thiourea, and 2,3-bis(sulfanyl)propan-1-ol (formerly 2,3-dimercapto-1-propanol), with the masking agent chosen based on...
3.4K
Hybrid Zones
21.7K
Hybrid zones are narrow regions where two closely related species interact, mate, and produce hybrids. Relative to either parent species, hybrids may possess distinct phenotypic or genetic differences that impact their survival and reproductive success. The genetic variances introduced by hybridization influence species diversity and speciation processes within the hybrid zone.
21.7K
Defense Mechanism Against Infection
9.1K
Natural flora, body system defenses, and inflammation are natural barriers of the body against infectious agents regardless of previous exposure. Normal floras of the human body refer to the microbial population that colonizes the skin and mucous membranes.
In addition, many body organ systems have unique defenses against infection. The skin is an intact, multilayered surface preventing invasion by microorganisms unless impaired. Mucous membranes lining the mouth, nose, and eyelids are barriers...
In addition, many body organ systems have unique defenses against infection. The skin is an intact, multilayered surface preventing invasion by microorganisms unless impaired. Mucous membranes lining the mouth, nose, and eyelids are barriers...
9.1K
Hybridoma Technology
17.1K
Hybridoma technology is used for the large-scale production of monoclonal antibodies. Monoclonal antibodies bind to only a single antigenic determinant or epitope. Such antibodies are used in research, diagnostics, and disease therapy. The hybridoma technology established in 1975 by Georges Köhler and Cesar Milstein was awarded the Nobel Prize in Medicine in 1984 for revolutionizing research and therapy.
Hybridoma Selection
Commonly used fusion techniques — electroporation,...
Hybridoma Selection
Commonly used fusion techniques — electroporation,...
17.1K
