arXiv AI By Marco Antonio Corallo, Andrea Agiollo, Mauro Conti, Alberto Giaretta

Does Reasoning Mitigate Backdoor Attacks? A Neuro-Symbolic Perspective

Read the original on arXiv AI →

The paper investigates whether neuro‑symbolic (NeSy) AI models, which combine neural perception with symbolic reasoning, can mitigate backdoor attacks. It presents a systematic evaluation comparing the NeSy framework DeepProbLog to baseline neural networks across eight backdoor settings and four reasoning tasks. Results indicate that NeSy models are generally more robust than pure neural models, but their resilience depends heavily on how strictly the reasoning process is enforced and its alignment with the attack target.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv AI.

arXiv Machine Learning
2d ago

Attack logics, not outputs: Concept-based Property Attacks for Shortcut Elimination in Neural Networks

The paper introduces concept-based property attacks, which target logical inconsistencies in human‑interpretable concepts (e.g., “red ∧ octagonal → stop_sign”) rather than merely flipping final class labels. It formalizes these properties, proves that attacking them reduces the search space compared to class‑level attacks, and implements them using concept‑based explainable AI techniques. Empirical results across vision and code‑processing models show that retraining with these attacks preserves robustness gains while better eliminating semantic biases.

By Raik Dankworth, Felix M\"achtle, Thomas Eisenbarth, Gesina Schwalbe