Topology-Driven Explainable GNNs for Trojan Detection in Deep Learning

Deep neural networks (DNNs) are widely used in critical applications such as autonomous systems, healthcare, and finance. However, their increasing deployment raises security concerns, particularly against adversarial threats like Trojan attacks. These attacks embed hidden triggers during training, causing misclassifications when activated while maintaining normal performance otherwise, making them difficult to detect. We propose a novel graph-based detection framework that models neuron activations as graph structures, capturing topological anomalies indicative of Trojan behavior. We leverage Graph Neural Networks (GNNs) to identify these structural deviations effectively. Additionally, we integrate Explainable AI (XAI) techniques to enhance interpretability. This not only improves trust and transparency in our framework but also aids in understanding the fundamental characteristics of backdoored networks, potentially guiding the development of more robust defense mechanisms.

Institutions

Publication Details

Published
2025-06-30
DOI
https://doi.org/10.1109/ijcnn64981.2025.11227820
Primary Topic
Adversarial Robustness in Machine Learning
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Topology-Driven Explainable GNNs for Trojan Detection in Deep Learning

Adversarial Robustness in Machine Learning
article

Topology-Driven Explainable GNNs for Trojan Detection in Deep Learning

article en

Abstract

Deep neural networks (DNNs) are widely used in critical applications such as autonomous systems, healthcare, and finance. However, their increasing deployment raises security concerns, particularly against adversarial threats like Trojan attacks. These attacks embed hidden triggers during training, causing misclassifications when activated while maintaining normal performance otherwise, making them difficult to detect. We propose a novel graph-based detection framework that models neuron activations as graph structures, capturing topological anomalies indicative of Trojan behavior. We leverage Graph Neural Networks (GNNs) to identify these structural deviations effectively. Additionally, we integrate Explainable AI (XAI) techniques to enhance interpretability. This not only improves trust and transparency in our framework but also aids in understanding the fundamental characteristics of backdoored networks, potentially guiding the development of more robust defense mechanisms.

Sapienza University of Rome (IT)
Peace, Justice and strong institutions
Openalex Percentile: Top 22%
Adversarial Robustness in Machine Learning
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.