Trojaning Attack on Neural Networks
Liu, Yingqi, Ma, Shiqing, Aafer, Yousra, Lee, Wen-Chuan, Zhai, Juan, Wang, Weihang, Zhang, Xiangyu·2018·Proceedings 2018 Network and Distributed System Security Symposium
Cited by (1,001)
Items 301–400 of 1,001
- Secure and Verifiable Inference in Deep Neural NetworksGuowen Xu, Hongwei Li, Hao Ren, Jianfei Sun, Shengmin Xu, Jianting Ning, Haomiao Yang, Kan Yang, Robert Huijie Deng · 2020 · Annual Computer Security Applications Conference
- Stealthy Backdoors as Compression ArtifactsYulong Tian, Fnu Suya, Fengyuan Xu, David Evans · 2022 · IEEE Transactions on Information Forensics and Security
- DriNet: Dynamic Backdoor Attack against Automatic Speech Recognization ModelsJianbin Ye, Xiaoyuan Liu, Zheng You, Guowei Li, Bo Liu · 2022 · Applied Sciences
- Universal backdoor attack on deep neural networks for malware detectionYunchun Zhang, Fan Feng, Zikun Liao, Zixuan Li, Shaowen Yao · 2023 · Applied Soft Computing
- Redeem Myself: Purifying Backdoors in Deep Learning Models using Self Attention DistillationXueluan Gong, Yanjiao Chen, Yang Wang, Qian Wang, Yuzhe Gu, Huayang Huang, Chao Qun Shen · 2023 · IEEE Symposium on Security and Privacy (S&P)
- Backdoor Cleansing with Unlabeled DataLu Pang, Tao Sun, Haibin Ling, Chao Chen · 2023 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
- Trojan Attack and Defense for Deep Learning-Based Navigation Systems of Unmanned Aerial VehiclesMohammed Mynuddin, Sultan Uddin Khan, Reza Ahmari, Luis Landivar, Mahmoud Nabil, Abdollah Homaifar · 2024 · IEEE Access
- On the Trade-off between Adversarial and Backdoor RobustnessCheng‐Hsin Weng, Yan-Ting Lee, Shan-Hung Wu · 2020 · neural information processing systems
- Reverse engineering imperceptible backdoor attacks on deep neural networks for detection and training set cleansingZhen James Xiang, David Jonathan Miller, George Kesidis · 2021 · Computers & Security
- Similarity-based integrity protection for deep learning systemsRuitao Hou, Shan Ai, Qi Chen, Hongyang Yan, Teng Hsing Huang, Kongyang Chen · 2022 · Information Sciences
- Data-Efficient Backdoor AttacksPengfei Xia, Ziqiang Li, Wei Zhang, Bin Li · 2022 · International Joint Conference on Artificial Intelligence
- Kaleidoscope: Physical Backdoor Attacks Against Deep Neural Networks With RGB FiltersXueluan Gong, Ziyao Wang, Yanjiao Chen, Meng Xue, Qian Wang, Chao Qun Shen · 2023 · IEEE Transactions on Dependable and Secure Computing
- QTROJAN: A Circuit Backdoor Against Quantum Neural NetworksCheng Chu, Lei Jiang, Martin Swany A, Fan Chen · 2023 · IEEE International Conference on Acoustics Speech and Signal Processing
- Defending Against Patch-based Backdoor Attacks on Self-Supervised LearningAjinkya Tejankar, Maziar Sanjabi, Qifan Wang, Sinong Wang, Hamed Firooz, Hamed Pirsiavash, Liang Tan · 2023 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
- Improving explainable AI with patch perturbation-based evaluation pipeline: a COVID-19 X-ray image analysis case studyJimin Sun, Wenqi Shi, Felipe Giuste, Yog S. Vaghani, Lingzi Tang, May Dongmei Wang · 2023 · Scientific Reports
- Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial TrainingLue Tao, Lei Feng, Jinfeng Yi, Sheng-Jun Huang, Songcan Chen · 2021 · arXiv (Cornell University)
- Dispersed Pixel Perturbation-Based Imperceptible Backdoor Trigger for Image Classifier ModelsWang, Yulong, Zhao, Minghui, Li, Shenghong, Yuan, Xin, Ni, Wei · 2022 · IEEE Transactions on Information Forensics and Security
- Trojan Attack on Deep Generative Models in Autonomous DrivingShaohua Ding, Yulong Tian, Fengyuan Xu, Qun Li, Sheng Zhong · 2019 · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering
- Neuroattack:undermining spiking neural networks security through externally triggered bit-flipsVenceslai, V. (Valerio), Marchisio, A. (Alberto), Ihsen Alouani, Martina, M. (Maurizio), Shafique, M. (Muhammad) · 2020 · LillOA (Université de Lille (University Of Lille))
- Non-interactive, Secure Verifiable Aggregation for Decentralized, Privacy-Preserving LearningCarlo Brunetta, Georgia Tsaloli, Bei Liang, Gustavo Banegas, Aikaterini Mitrokotsa · 2021 · Lecture notes in computer science
- LinkBreaker: Breaking the Backdoor-Trigger Link in DNNs via Neurons Consistency CheckZhenzhu Chen, Shang Wang, Anmin Fu, Yansong Gao, Shui Yu, Robert Huijie Deng · 2022 · IEEE Transactions on Information Forensics and Security
- Unlearning Backdoor Attacks in Federated LearningChen Wu, Sencun Zhu, Prasenjit Mitra, Wei Wang · 2024 · IEEE Conference on Communications and Network Security
- Workplace security and privacy implications in the GenAI age: A surveyAbebe Abeshu Diro, Shahriar Kaisar, Akanksha Saini, Samar Fatima, Hiep Pham, Fikadu Erba · 2025 · Journal of Information Security and Applications
- Two Sides of the Same Coin: Boons and Banes of Machine Learning in Hardware SecurityWenye Liu, Chip-Hong Chang, Xueyang Wang, Chen Liu, Jason M. Fung, Mohammad Ebrahimabadi, Naghmeh Karimi, Xingyu Meng, Kanad Basu · 2021 · IEEE Journal on Emerging and Selected Topics in Circuits and Systems
- Towards a robust and trustworthy machine learning system development: An engineering perspectivePulei Xiong, Scott Buffett, Shahrear Iqbal, Philippe Lamontagne, Mohammad Mamun, Heather Molyneaux · 2022 · Journal of Information Security and Applications
- Stealthy and Flexible Trojan in Deep Learning FrameworkYajie Wang, Kongyang Chen, Yu‐an Tan, Shuxin Huang, Wencong Ma, Yuanzhang Li · 2022 · IEEE Transactions on Dependable and Secure Computing
- A defense method against backdoor attacks on neural networksSara Kaviani, Samaneh Shamshiri, Insoo Sohn · 2022 · Expert Systems with Applications
- Disguising Attacks with Explanation-Aware BackdoorsMaximilian Noppel, Lukas Peter, Christian Wressnegger · 2023 · IEEE Symposium on Security and Privacy (S&P)
- Practical Poisoning Attacks on Neural NetworksJunfeng Guo, Cong Liu · 2020 · Lecture notes in computer science
- TrojDRL: Trojan Attacks on Deep Reinforcement Learning AgentsPanagiota Kiourti, Kacper Wardega, Susmit Jha, Wenchao Li · 2019 · arXiv (Cornell University)
- ConFoc: Content-Focus Protection Against Trojan Attacks on Neural NetworksMiguel Villarreal-Vasquez, Bharat Bhargava · 2020 · arXiv (Cornell University)
- Can You Hear It? Backdoor Attacks via Ultrasonic TriggersStefanos Koffas, Jing Xu, Mauro Conti, Stjepan Picek · 2021 · arXiv (Cornell University)
- Deep Entity Classification: Abusive Account Detection for Online Social NetworksTeng Gang Xu, Gerard Goossen, Huseyin Kerem Cevahir, Sara Khodeir, Yingyezhe Jin, Frank Li, Shawn Shan, Sagar Patel, David Mandell Freeman, Paul Pearce · 2021 · USENIX Security Symposium
- Robust Backdoor Attacks against Deep Neural Networks in Real Physical WorldMingfu Xue, Can He, Shichang Sun, Jian Wang, Weiqiang Liu · 2021 · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)
- Defending Deep Neural Networks Against Backdoor Attack by Using De-Trigger AutoencoderHyun Kwon · 2021 · IEEE Access
- Get a Model! Model Hijacking Attack Against Machine Learning ModelsAhmed Salem, Michael Backes A, Yang Zhang · 2022 · Network and Distributed System Security Symposium
- Against Backdoor Attacks In Federated Learning With Differential PrivacyMiao Lu, Wei Yang, Rong Hu, Li Lü, Liusheng Huang · 2022 · IEEE International Conference on Acoustics Speech and Signal Processing
- TrojanZoo: Towards Unified, Holistic, and Practical Evaluation of Neural BackdoorsRen Pang, Zheng Zhang, Xiangshan Gao, Zhaohan Xi, Shouling Ji, Peng Cheng, Xiapu Luo, Ting Wang · 2022 · IEEE European Symposium on Security and Privacy
- Intellectual property protection of DNN modelsSen Peng, Yufei Chen, Jie Xu, Zizhuo Chen, Cong Wang, Xiaohua Jia · 2022 · World Wide Web
- $\tt{PoisonedGNN}$: Backdoor Attack on Graph Neural Networks-Based Hardware Security SystemsLilas Alrahis, Satwik Patnaik, Muhammad Abdullah Hanif, Muhammad Shafique, Ozgur Sinanoglu · 2023 · IEEE Transactions on Computers
- Attack as Detection: Using Adversarial Attack Methods to Detect Abnormal ExamplesZhe Zhao, Guangke Chen, Tong Liu, Taishan Li, Fu Song, Jingyi Wang, Jun Sun · 2023 · ACM Transactions on Software Engineering and Methodology
- SoK: Explainable Machine Learning in Adversarial EnvironmentsMaximilian Noppel, Christian Wressnegger · 2024 · IEEE Symposium on Security and Privacy (S&P)
- Effectiveness of Distillation Attack and Countermeasure on Neural Network WatermarkingZiqi Yang, Tong Tang, Hung Dang, Zhengyang Wu, Ee-Chien Chang · 2025 · IEEE Transactions on Dependable and Secure Computing
- Sequence Triggered Hardware Trojan in Neural Network AcceleratorZizhen Liu, Jing Ye, Xing Hu, Huawei Li, Xiaowei Li, Yu Hen Hu · 2020 · IEEE VLSI Test Symposium (VTS)
- A Comprehensive Survey on Backdoor Attacks and Their Defenses in Face Recognition SystemsQuentin Le Roux, Eric Bourbao, Yannick Teglia, Kassem Kallas · 2024 · IEEE Access
- Textual Backdoor Attack for the Text Classification SystemHyun Kwon, Sanghyun Lee · 2021 · Security and Communication Networks
- AI-Lancet: Locating Error-inducing Neurons to Optimize Neural NetworksYue Zhao, Hong Guo Zhu, Kai Chen, Shengzhi Zhang · 2021 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- Lightweight Privacy-Preserving GAN Framework for Model Training and Image SynthesisYang Yang, Ke Mu, Robert Huijie Deng · 2022 · IEEE Transactions on Information Forensics and Security
- Watermarking Graph Neural Networks based on Backdoor AttacksJing Xu, Stefanos Koffas, Oğuzhan Ersoy, Stjepan Picek · 2023 · IEEE European Symposium on Security and Privacy
- Backdoor Attacks on Facial Recognition in the Physical WorldEmily Wenger, Josephine Passananti, Yuanshun Yao, Hai-Tao Zheng, Ben Y. Zhao · 2020 · arXiv (Cornell University)
- COMBAT: Alternated Training for Effective Clean-Label Backdoor AttacksTran Huynh, Dang Nguyen, Tung Pham, Anh Tuan Tran · 2024 · Proceedings of the AAAI Conference on Artificial Intelligence
- Interpretability-Guided Defense Against Backdoor Attacks to Deep Neural NetworksWei Jiang, Xiangyu Wen, Jinyu Zhan, Xupeng Wang, Ziwei Song · 2021 · IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems
- FaceHack: Attacking Facial Recognition Systems Using Malicious Facial CharacteristicsEsha Sarkar, Hadjer Benkraouda, G Muthu Krishnan, Homer Gamil, Michail Maniatakos · 2021 · IEEE Transactions on Biometrics Behavior and Identity Science
- Backdoor Attacks on Time Series: A Generative ApproachYujing Jiang, Xingjun Ma, Sarah Erfani, James Bailey · 2023 · IEEE Conference on Secure and Trustworthy Machine Learning (SaTML)
- Don't Knock! Rowhammer at the Backdoor of DNN ModelsM. Caner Tol, Saad Islam, Andrew Adiletta, Berk Sunar, Ziming Zhang · 2023 · International Conference on Dependable Systems & Networks/Proceedings
- Adversarial Learning in Statistical Classification: A Comprehensive Review of Defenses Against AttacksDavid Jonathan Miller, Zhen James Xiang, George Kesidis · 2019 · arXiv (Cornell University)
- Privacy and security vulnerabilities in edge intelligence: An analysis and countermeasuresAhmed A. Shafee, Syed Rafay Hasan, Tasneem A. Awaad · 2025 · Computers & Electrical Engineering
- Deep Learning BackdoorsShaofeng Li, Shiqing Ma, Minhui Xue, Benjamin Zi Hao Zhao · 2022 · Lecture notes in computer science
- Concurrent weight encoding-based detection for bit-flip attack on neural network acceleratorsQi Liu, Wujie Wen, Yanzhi Wang · 2020
- DeepiSignAlsharif Abuadbba, Hyoungshick Kim, Surya Nepal · 2021 · ACM Symposium on Applied Computing
- Random and Adversarial Bit Error Robustness: Energy-Efficient and Secure DNN AcceleratorsDavid Stutz, Nandhini Chandramoorthy, Matthias Hein, Bernt Schiele · 2022 · IEEE Transactions on Pattern Analysis and Machine Intelligence
- Guided Erasable Adversarial Attack (GEAA) Toward Shared Data ProtectionMengnan Zhao, Bo Wang, Wei Wang, Yuqiu Kong, Tianhang Zheng, Kui Ren · 2022 · IEEE Transactions on Information Forensics and Security
- Defending Backdoor Attacks on Vision Transformer via Patch ProcessingKhoa D. Doan, Yingjie Lao, Peng Yang, Ping Li · 2023 · Proceedings of the AAAI Conference on Artificial Intelligence
- Dynamics-aware loss for learning with label noiseXiu-Chuan Li, Xiaobo Xia, Fei Zhu, Tongliang Liu, Xu-Yao Zhang, Cheng‐Lin Liu · 2023 · Pattern Recognition
- Backdooring Neural Code SearchWeisong Sun, Yuchen Chen, Guanhong Tao, Chunrong Fang, Xiangyu Zhang, Quanjun Zhang, Bin Luo · 2023 · Proceedings of the conference - Association for Computational Linguistics. Meeting
- NOTABLE: Transferable Backdoor Attacks Against Prompt-based NLP ModelsKai Mei, Zheng Li, Zhenting Wang, Yang Zhang, Shiqing Ma · 2023 · Proceedings of the conference - Association for Computational Linguistics. Meeting
- Promoting or Hindering: Stealthy Black-Box Attacks Against DRL-Based Traffic Signal ControlYan Ren, Heng Zhang, Xianghui Cao, Chaoqun Yang, Jian Zhang, Hongran Li · 2023 · IEEE Internet of Things Journal
- Invisible Poisoning: Highly Stealthy Targeted Poisoning AttackJinyin Chen, Haibin Zheng, Mengmeng Su, Tianyu Du, Changting Lin, Shouling Ji · 2020 · Lecture notes in computer science
- DeepTrigger: A Watermarking Scheme of Deep Learning Models Based on Chaotic Automatic Data AnnotationYingqian Zhang, Yiran Jia, Xingyuan Wang, Qiong Niu, Niandong Chen · 2020 · IEEE Access
- Cassandra: Detecting Trojaned Networks From Adversarial PerturbationsXiaoyu Zhang, Rohit Gupta, Ajmal Saeed Mian, Nazanin Rahnavard, Mubarak Shah · 2021 · IEEE Access
- Design of intentional backdoors in sequential modelsZhaoyuan Yang, Naresh Iyer, Johan Reimann, Nurali Virani · 2019 · arXiv (Cornell University)
- Poisoning Attacks to Local Differential Privacy Protocols for Key-Value DataYongji Wu, Xiaoyu Cao, Jia, Jinyuan, Neil Zhenqiang Gong · 2021 · arXiv (Cornell University)
- Intelligent Security Measures for Smart Cyber Physical SystemsMuhammad Shafique, Faiq Khalid, Semeen Rehman · 2018 · Euromicro Conference on Digital System Design (DSD)
- Backdoor Suppression in Neural Networks using Input Fuzzing and Majority VotingEsha Sarkar, Yousif Alkindi, Michail Maniatakos · 2020 · IEEE Design and Test
- Towards Backdoor Attack on Deep Learning based Time Series ClassificationDaizong Ding, Mi Zhang, Yuanmin Huang, Xudong Pan, Fuli Feng, Erling Jiang, Min Yang · 2022 · IEEE International Conference on Data Engineering (ICDE)
- Data Poisoning and Backdoor Attacks on Audio Intelligence SystemsYunjie Ge, Qian Wang, Jiayuan Yu, Chao Shen, Qi Lecky Li · 2023 · IEEE Communications Magazine
- Backdoor attacks against distributed swarm learningKongyang Chen, Huaiyuan Zhang, Xiangyu Feng, Xiaoting Zhang, Bing Mi, Zhiping Jin · 2023 · ISA Transactions
- BDMMT: Backdoor Sample Detection for Language Models Through Model Mutation TestingJanguo Wei, Ming Yu Fan, Wenjing Jiao, Wuxia Jin, Ting Liu · 2024 · IEEE Transactions on Information Forensics and Security
- FlowMur: A Stealthy and Practical Audio Backdoor Attack with Limited KnowledgeJiahe Lan, Jie Wang, Baochen Yan, Zheng Yan, Elisa Bertino · 2024 · IEEE Symposium on Security and Privacy (S&P)
- RoFL: Attestable Robustness for Secure Federated Learning.Lukas Burkhalter, Hidde Lycklama, Alexander Viand, Nicolas Küchler, Anwar Hithnawi · 2021 · arXiv (Cornell University)
- Towards Practical Backdoor Attacks on Federated Learning SystemsChenghui Shi, Shouling Ji, Xudong Pan, Xuhong Zhang, Mi Zhang, Min Yang, Jun Zhou, Jianwei Yin, Ting Wang · 2024 · IEEE Transactions on Dependable and Secure Computing
- Position: Prospective of Autonomous Driving - Multimodal LLMs, World Models, Embodied Intelligence, AI Alignment, and MambaYunsheng Ma, Wenqian Ye, Can Cui, Haiming Zhang, Shuo Xing, Fucai Ke, Jinhong Wang, Chenglin Miao, Jintai Chen, Hamid Rezatofighi et al. · 2025 · IEEE/CVF Winter Conference on Applications of Computer Vision Workshops (WACVW)
- Backdoor attacks and defense mechanisms in federated learning: A surveyZhaozheng Li, Jiahe Lan, Zheng Yan, Erol Gelenbe A · 2025 · Information Fusion
- Data Poisoning Vulnerabilities Across Health Care Artificial Intelligence Architectures: Analytical Security Framework and Defense StrategiesFarhad Abtahi, Fernando Seoane, Iván Pau, Mario Vega-Barbas · 2026 · Journal of Medical Internet Research
- HybridTEE: Secure Mobile DNN Execution Using Hybrid Trusted Execution EnvironmentAkshay Gangal, Mengmei Ye, Sheng Wei · 2020 · Asian Hardware Oriented Security and Trust Symposium (AsianHOST)
- Identification for Deep Neural Network: Simply Adjusting Few Weights!Yingjie Lao, Peng Yang, Weijie Zhao, Ping Li · 2022 · IEEE International Conference on Data Engineering (ICDE)
- Natural Backdoor Attacks on Speech Recognition ModelsJinwen Xin, Xixiang Lyu, Jing Ma · 2023 · Lecture notes in computer science
- Progressive Backdoor Erasing via connecting Backdoor and Adversarial AttacksBingxu Mu, Zhenxing Niu, Le Wang, Xue Wang, Qiguang Mia, Rong Jin, Gang Hua · 2023 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
- The Dark Side of Dynamic Routing Neural Networks: Towards Efficiency Backdoor InjectionSimin Chen, Hanlin Chen, Mirazul Haque, Cong Liu, Wei H. Yang · 2023 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
- PolicyCleanse: Backdoor Detection and Mitigation for Competitive Reinforcement LearningJunfeng Guo, Ang Li, Lixu Wang, Cong Liu · 2023 · IEEE/CVF International Conference on Computer Vision (ICCV)
- Reaching Data Confidentiality and Model Accountability on the CalTrainZhongshu Gu, Hani T. Jamjoom, Dong Su, Heqing Huang, Jialong Zhang, Tengfei Ma, Dimitrios E. Pendarakis, Ian Molloy · 2019 · International Conference on Dependable Systems & Networks/Proceedings
- A multitarget backdooring attack on deep neural networks with random location triggerYu Xiao, Cong Liu, Zheng Ming-wen, Wang Yajie, Liu Xinrui, Song Shuxiao, Ma Yuexuan, Jun Zheng · 2021 · International Journal of Intelligent Systems
- TrojanNet: Embedding Hidden Trojan Horse Models in Neural Networks.Chuan Guo, Ruihan Wu, Kilian Q. Weinberger · 2020 · arXiv (Cornell University)
- Don't Trigger Me! A Triggerless Backdoor Attack Against Deep Neural NetworksAhmed Salem, Michael Backes A, Yang Zhang · 2020 · arXiv (Cornell University)
- BAAAN: Backdoor Attacks Against Autoencoder and GAN-Based Machine Learning ModelsAhmed Salem, Yannick Sautter, Michael Backes A, Mathias Humbert, Yang Zhang · 2020 · arXiv (Cornell University)
- NNoculationAkshaj Kumar Veldanda, Kang Liu, Benjamin Tan, P. Krishnamurthy, Farshad Khorrami, Ramesh Karri, Brendan Dolan-Gavitt, Siddharth Garg · 2021 · ACM Workshop on Artificial Intelligence and Security (AISec)
- ATTEQ-NN: Attention-based QoE-aware Evasive Backdoor AttacksXueluan Gong, Yanjiao Chen, Jianshuo Dong, Qian Wang · 2022 · Network and Distributed System Security Symposium
- Incremental Learning, Incremental Backdoor ThreatsWenbo Jiang, Tianwei Zhang, Han Qiu, Hongwei Li, Guowen Xu · 2022 · IEEE Transactions on Dependable and Secure Computing
- Turning Federated Learning Systems Into Covert ChannelsGabriele Costa, Fabio Pinelli, Simone Soderi, Gabriele Tolomei · 2022 · IEEE Access
- On the Effectiveness of Adversarial Training Against Backdoor AttacksYinghua Gao, Dongxian Wu, Jingfeng Zhang, Guanhao Gan, Shu‐Tao Xia, Gang Niu, Masashi Sugiyama · 2023 · IEEE Transactions on Neural Networks and Learning Systems