The DOI matches its Crossref record; 47 of the 49 references it cites were found in a registry or an index.
Trojaning Attack on Neural Networks
Open accessAbstract
With the fast spread of machine learning techniques, sharing and adopting public machine learning models become very popular.This gives attackers many new opportunities.In this paper, we propose a trojaning attack on neural networks.As the models are not intuitive for human to understand, the attack features stealthiness.Deploying trojaned models can cause various severe consequences including endangering human lives (in applications like autonomous driving).We first inverse the neural network to generate a general trojan trigger, and then retrain the model with reversed engineered training data to inject malicious behaviors to the model.The malicious behaviors are only activated by inputs stamped with the trojan trigger.In our attack, we do not need to tamper with the original training process, which usually takes weeks to months.Instead, it takes minutes to hours to apply our attack.Also, we do not require the datasets that are used to train the model.In practice, the datasets are usually not shared due to privacy or copyright concerns.We use five different applications to demonstrate the power of our attack, and perform a deep analysis on the possible factors that affect the attack.The results show that our attack is highly effective and efficient.The trojaned behaviors can be successfully triggered (with nearly 100% possibility) without affecting its test accuracy for normal input and even with better accuracy on public dataset.Also, it only takes a small amount of time to attack a complex neuron network model.In the end, we also discuss possible defense against such attacks.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The check wasn’t confident either way, so it gives no verdict — never disputed.
In the citing paper
“An alternative to this assumption would be incorporating an additional party or a public bulletin board (see, e.g., [398]) into the model that is known to the clients and trusted to not collude with the server.”
From Advances and Open Problems in Federated Learning (2021) · cites this paper as [398]
Experimental — accuracy not yet measuredIn the citing paper
“By sharing the model parameters instead of data, FL introduces new attack surfaces at training time by enhancing the capabilities of the adversary [16].”
From Vulnerabilities in federated learning (2021) · cites this paper as [16]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
ImageNet Large Scale Visual Recognition Challenge
Russakovsky, O., Deng, J., Su, H., Krause, J., Satheesh, S., Ma, S., Huang, Z., Karpathy, A., Khosla, A., Bernstein, M., et al. (2015) · International Journal of Computer Vision · doi:10.1007/s11263-015-0816-y · Cited by 39,380
Self-citationLabaca-Castro, R. (2023) · Springer eBooks · doi:10.1007/978-3-658-40442-0_9 · Cited by 21,119
FaceNet: A unified embedding for face recognition and clustering
Schroff, F., Kalenichenko, D., & Philbin, J. (2015) · 2015 IEEE Conference on Computer Vision and Pattern Recognition (CVPR) · doi:10.1109/cvpr.2015.7298682 · Cited by 15,267
Convolutional Neural Networks for Sentence Classification
Kim, Y. (2014) · Proceedings of the 2014 Conference on Empirical Methods in Natural Language Processing (EMNLP) · doi:10.3115/v1/d14-1181 · Cited by 14,831
Towards Evaluating the Robustness of Neural Networks
Carlini, N., & Wagner, D. (2017) · 2017 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2017.49 · Cited by 8,859
DeepFace: Closing the Gap to Human-Level Performance in Face Verification
Taigman, Y., Yang, M., Ranzato, M., & Wolf, L. (2014) · 2014 IEEE Conference on Computer Vision and Pattern Recognition · doi:10.1109/cvpr.2014.220 · Cited by 6,542
“Librispeech: an ASR corpus based on public domain audio books,”
Panayotov, V., Chen, G., Povey, D., & Khudanpur, S. (2015) · 2015 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP) · doi:10.1109/icassp.2015.7178964 · Cited by 6,072
Parkhi, O. M., Vedaldi, A., & Zisserman, A. (2015) · Procedings of the British Machine Vision Conference 2015 · doi:10.5244/c.29.41 · Cited by 5,479
Membership Inference Attacks Against Machine Learning Models
Shokri, R., Stronati, M., Song, C., & Shmatikov, V. (2017) · 2017 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2017.41 · Cited by 4,754
Labeled Faces in the Wild: A Database forStudying Face Recognition in Unconstrained Environments
Huang, G. B., Mattar, M., Berg, T. L., & Miller, E. G. (2008) · HAL · Cited by 4,445
Research works printed but not linked: 2
- [26]26. D. Erhan, A. Courville, and Y. Bengio, "Understanding representations learned in deep architectures," Department dInformatique et Recherche Operationnelle, University of Montreal, QC, Canada, Tech. Rep, vol. 1355, 2010.
- [62]62. G. Zhang, C. Yan, X. Ji, T. Zhang, T. Zhang, and W. Xu, "Dolphinattack: Inaudible voice commands," in Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, ser. CCS '17. New York, NY, USA: ACM, 2017, pp. 103-117.
Cited by
Sorted by citations
Items 701–800 of 1,001
A Survey of Adversarial Attacks on Wireless Communications
Luo, X., Qin, Q., Gong, X., & Xue, M. (2022) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-031-04231-7_7 · Cited by 5
Invisible Encoded Backdoor attack on DNNs using Conditional GAN
Arshad, I., Qiao, Y., Lee, B., & Ye, Y. (2023) · International Conference on Consumer Electronics · doi:10.1109/icce56470.2023.10043484 · Cited by 6
Defense Method Challenges Against Backdoor Attacks in Neural Networks
Shamshiri, S., & Sohn, I. (2024) · International Conference on Artificial Intelligence in Information and Communication (ICAIIC) · doi:10.1109/icaiic60209.2024.10463411 · Cited by 5
TamperNN: Efficient Tampering Detection of Deployed Neural Nets
Merrer, E. L., & Trédan, G. (2019) · Proceedings/Proceedings - International Symposium on Software Reliability Engineering · doi:10.1109/issre.2019.00049 · Cited by 5
On the Security Relevance of Initial Weights in Deep Neural Networks
Grosse, K., Trost, T. A., Mosbach, M., Michael Backes, A., & Klakow, D. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-61609-0_1 · Cited by 6
Application of complex systems in neural networks against Backdoor attacks
Kaviani, S., Sohn, I., & Liu, H. (2020) · International Conference on Information and Communication Technology Convergence (ICTC) · doi:10.1109/ictc49870.2020.9289220 · Cited by 5
On the Security Risks of AutoMLPreprint
Pang, R., Xi, Z., Ji, S., Luo, X., & Wang, T. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2110.06018 · Cited by 8
Energy Backdoor Attack to Deep Neural Networks
Meftah, H. F. Z. B., Hamidouche, W., Fezza, S. A., Olivier Déforges, A., & Kallas, K. (2025) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp49660.2025.10888330 · Cited by 5
Carnerero-Cano, J., Muñoz-González, L., Spencer, P., & Lupu, E. (2023) · IEEE Transactions on Neural Networks and Learning Systems · doi:10.1109/tnnls.2023.3291648 · Cited by 5
Practical and Efficient Secure Aggregation for Privacy-Preserving Machine Learning
Zhang, Y., Li, X., Luo, Q., Wang, Y., & Shen, Y. (2023) · Asia Conference on Artificial Intelligence, Machine Learning and Robotics (AIMLR) · doi:10.1145/3625343.3625344 · Cited by 4
BR-FEEL: A backdoor resilient approach for federated edge learning with fragment-sharing
Qi, S., Ma, H., Zou, Y., Yuan, Y., Li, P., & Yu, D. (2024) · Journal of Systems Architecture · doi:10.1016/j.sysarc.2024.103258 · Cited by 4
Model Poisoning Attack Against Neural Network Interpreters in IoT Devices
Zhang, X., Li, F., Zhang, H., Zhang, H., Huang, Z., Fan, L., Cheng, X., & Hu, P. (2024) · IEEE Transactions on Mobile Computing · doi:10.1109/tmc.2024.3486218 · Cited by 5
Self-citationLarge Vision-Language Model Security: A Survey
Wang, T., Fang, Z., Xue, H., Zhang, C., Jin, M., Xu, W., Shu, D., Yang, S. J., Wang, Z. G., & Liu, D. (2024) · Communications in computer and information science · doi:10.1007/978-981-96-0151-6_1 · Cited by 4
Low-Frequency Black-Box Backdoor Attack via Evolutionary Algorithm
Qiao, Y., Liu, D., Wang, R., & Liang, K. (2025) · IEEE Winter Conference on Applications of Computer Vision · doi:10.1109/wacv61041.2025.00737 · Cited by 5
Two Sides of the Same Coin: Learning the Backdoor to Remove the Backdoor
Zhao, Q., & Wressnegger, C. (2025) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v39i21.34441 · Cited by 4
Misactivation-Aware Stealthy Backdoor Attacks on Neural Code Understanding Models
Sun, X., Xiao, Y., Bo, L., Sun, W., Liu, X., Li, B., & Zhang, J. (2025) · IEEE Transactions on Software Engineering · doi:10.1109/tse.2025.3614128 · Cited by 4
On the Neural Backdoor of Federated Generative Models in Edge Computing
Wang, D., Wen, S., Jolfaei, A., Haghighi, M. S., Nepal, ., & Xiang, Y. (2021) · ACM Transactions on Internet Technology · doi:10.1145/3425662 · Cited by 4
Reputation-Based Defense Scheme Against Backdoor Attacks on Federated Learning
Su, L., Liu, Z., & Ye, J. (2022) · Lecture notes on data engineering and communications technologies · doi:10.1007/978-981-16-7469-3_107 · Cited by 4
Learning Sparse Evidence- Driven Interpretation to Understand Deep Reinforcement Learning Agents
Dao, G., Huff, W. H., & Lee, M. (2021) · IEEE Symposium Series on Computational Intelligence (SSCI) · doi:10.1109/ssci50451.2021.9660192 · Cited by 4
A Backdoor Embedding Method for Backdoor Detection in Deep Neural Networks
Liu, M., Zheng, H. Y., Liu, Q., Xing, X., & Dai, Y. (2022) · Communications in computer and information science · doi:10.1007/978-981-19-0468-4_1 · Cited by 4
An Electromagnetic Covert Channel based on Neural Network Architecture
Gu, C., Chen, J., Tan, R., & Jiang, L. (2021) · IEEE International Conference on Parallel and Distributed Systems (ICPADS) · doi:10.1109/icpads53394.2021.00028 · Cited by 4
Sun, Y., Ochiai, H., & Sakuma, J. (2024) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn60899.2024.10651460 · Cited by 4
Mask-Based Invisible Backdoor Attacks on Object Detection
Shin, J. (2024) · Proceedings - International Conference on Image Processing · doi:10.1109/icip51287.2024.10647450 · Cited by 4
Real-Time Industrial Automated Video Analytics System for Welding Defect Detection
Pavlov, M. P., Rybin, E., Ivashnev, K., Георгиевич, М. А., & Korzun, D. G. (2024) · Conference of Open Innovations Association (FRUCT) · doi:10.23919/fruct64283.2024.10749903 · Cited by 4
Clean and Compact: Efficient Data-Free Backdoor Defense with Model Compactness
Phan, H., Xiao, J., Sui, Y., Zhang, T., Tang, Z., Shi, C., Wang, Y., Chen, Y. J., & Yuan, B. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-73027-6_16 · Cited by 4
S-Teapot: Swift and Efficient Defense Against Patch-Based Backdoor Attack
Yang, Y., Ma, Z., Li, Y., Liu, Y., Liu, X., & Ma, J. (2025) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2025.3542985 · Cited by 4
Self-citationDowner, J., Wang, R., & Wang, B. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3613061 · Cited by 11
A Security Concern About Deep Learning Models
Wu, J., Lin, X., Lin, Z., & Tang, Y. (2018) · Lecture notes in computer science · doi:10.1007/978-3-030-03026-1_15 · Cited by 5
Designing Trojan Detectors in Neural Networks Using Interactive Simulations
Bajcsy, P., Schaub, N. J., & Majurski, M. P. (2021) · Applied Sciences · doi:10.3390/app11041865 · Cited by 7
Hide and Seek: On the Stealthiness of Attacks Against Deep Learning Systems
Liu, Z., Li, F., Lin, J., Zhu Li, B., & Luo, B. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-17143-7_17 · Cited by 4
Rule-Based Runtime Mitigation Against Poison Attacks on Neural Networks
Usman, M., Gopinath, D., Sun, Y., & Păsăreanu, C. S. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-17196-3_4 · Cited by 4
An anomaly detection approach for backdoored neural networks: face recognition as a case study
Unnervik, A., & Marcel, S. (2022) · International Conference of the Biometrics Special Interest Group (BIOSIG) · doi:10.1109/biosig55365.2022.9897044 · Cited by 6
COLLIDER: A Robust Training Framework for Backdoor Data
Dolatabadi, H. M., Erfani, S., & Leckie, C. A. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-26351-4_41 · Cited by 4
Odetola, T. A., Adeyemo, A. A., Khalid, F., & Hasan, S. R. (2023) · Microprocessors and Microsystems · doi:10.1016/j.micpro.2023.104827 · Cited by 4
Mo, M., Wang, C., & Bian, S. (2024) · Symmetry · doi:10.3390/sym16030299 · Cited by 4
Versatile Backdoor Attack With Visible, Semantic, Sample-Specific and Compatible Triggers
Wang, R., Chen, H., Zhu, Z., Liu, L., & Wu, B. (2025) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2025.3642161 · Cited by 16
An Empirical Comparison on Malicious Activity Detection Using Different Neural Network-Based Models
Albahar, M. A., Al-Falluji, R. A., & Binsawad, M. H. (2020) · IEEE Access · doi:10.1109/access.2020.2984157 · Cited by 4
Ftaimi, A., & Mazri, T. (2021) · E3S Web of Conferences · doi:10.1051/e3sconf/202122901004 · Cited by 4
Double-cross attacks: Subverting active learning systems
Vicarte, J. R. S., Wang, G., & Fletcher, C. W. (2021) · USENIX Security Symposium · Cited by 4
AI-powered Covert Botnet Command and Control on OSNs.Preprint
Wang, Z., Liu, C., Cui, X., Zhang, J., Wu, D., Yin, J., Liu, J., Liu, Q., & Zhang, J. (2020) · arXiv (Cornell University) · Cited by 4
A Singular Value Perspective on Model RobustnessPreprint
Jere, M., Kumar, M., & Koushanfar, F. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2012.03516 · Cited by 6
Berthier, N., Alshareef, A., Sharp, J., Schewe, S., & Huang, X. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2103.03704 · Cited by 4
DeepC2: AI-powered Covert Botnet Command and Control on OSNs.Preprint
Wang, Z., Liu, C., Cui, X., Wu, D., Yin, J., Liu, J., Zhang, J., & Tian, Z. (2020) · arXiv (Cornell University) · Cited by 4
Mental Models of Adversarial Machine LearningPreprint
Bieringer, L., Grosse, K., Michael Backes, A., Biggio, B., & Krombholz, K. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2105.03726 · Cited by 5
Generative Models for Security: Attacks, Defenses, and OpportunitiesPreprint
Bauer, L. A., & Bindschaedler, V. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2107.10139 · Cited by 14
NTD: Non-Transferability Enabled Backdoor DetectionPreprint
Li, Y., Ma, H., Zhang, Z., Gao, Y., Abuadbba, A., Fu, A., Zheng, Y., Al-Sarawi, S. F., & Abbott, D. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2111.11157 · Cited by 4
A General Framework for Defending Against Backdoor Attacks via Influence GraphPreprint
Sun, X., Li, J., Li, X., Wang, Z., Zhang, T., Qiu, H., Wu, F., & Fan, C. C. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2111.14309 · Cited by 6
Mitigating Deep Reinforcement Learning Backdoors in the Neural Activation Space
Vyas, S., Hicks, C., & Mavroudis, V. (2024) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw63631.2024.00013 · Cited by 3
Exploiting Layerwise Feature Representation Similarity For Backdoor Defence in Federated Learning
Walter, K., Nepal, ., & Kanhere, S. S. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-70903-6_18 · Cited by 3
Backdoor Attack to Giant Model in Fragment-Sharing Federated Learning
Qi, S., Ma, H., Zou, Y., Yuan, Y., Xie, Z., Li, P., & Cheng, X. (2024) · Big Data Mining and Analytics · doi:10.26599/bdma.2024.9020035 · Cited by 3
Attention-Driven Conflict Management in Smart IoT-Based Systems
Awanyo, C., & Guermouche, N. (2024) · Lecture notes in computer science · doi:10.1007/978-981-96-0805-8_10 · Cited by 3
On the Credibility of Backdoor Attacks Against Object Detectors in the Physical World
Doan, B. G., Nguyen, D. Q., Lindquist, C., Montague, P., Abraham, T., Vel, O. D., Camtepe, S. A., Kanhere, S. S., Abbasnejad, E., & Ranasinghe, D. C. (2024) · Annual Computer Security Applications Conference · doi:10.1109/acsac63791.2024.00079 · Cited by 5
DMC-Watermark: A backdoor richer watermark for dual identity verification by dynamic mask covering
Zhu, Y., Wang, R., & Xia, D. (2025) · Applied Intelligence · doi:10.1007/s10489-025-06608-w · Cited by 3
Robustness Evaluation of Knowledge Graph Embedding Models Under Non-targeted Attacks
Kapoor, S., Sharma, A., Röder, M., Demir, C., & Ngomo, A.-C. N. (2025) · Lecture notes in computer science · doi:10.1007/978-3-031-94575-5_15 · Cited by 4
Norm-Based Outlier Filtering and Consensus Aggregation for Robust Federated Learning
Yeo, H., & Lee, J.-W. (2025) · IEEE Access · doi:10.1109/access.2025.3580198 · Cited by 4
Backdoor Attack on Encryption-Protected Vertical Federated Learning
Chen, J., Chen, D. Z., Cui, J., & Zhong, H. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3581095 · Cited by 3
TrojanTime: Backdoor Attacks on Time Series Classification
Dong, C., Sun, Z., Bai, G., Piao, S., Chen, W., & Zhang, W. E. (2025) · Lecture notes in computer science · doi:10.1007/978-981-96-8183-9_13 · Cited by 3
Michscan: Black-Box Neural Network Integrity Checking at Runtime Through Power Analysis
Paul, R., & Zuzak, M. (2025) · IEEE International Symposium on Hardware Oriented Security and Trust (HOST) · doi:10.1109/host64725.2025.11050062 · Cited by 3
Can Differential Privacy Hinder Poisoning Attack Detection in Federated Learning?
Aggarwal, C., Nair, D. G., Mohammadi, J. A., Nair, J. J., & Ott, J. (2025) · Journal of Sensor and Actuator Networks · doi:10.3390/jsan14040083 · Cited by 3
Explore the Effect of Data Selection on Poison Efficiency in Backdoor Attacks
Li, Z., Xia, P., Sun, H., Zeng, Y., Zhang, W., & Li, B. (2025) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2025.3596981 · Cited by 20
A Taxonomy of System-Level Attacks on Deep Learning Models in Autonomous Vehicles
Tehrani, M. J., Kim, J.-H., Foulefack, R. Z. L., Marchetto, A., & Tonella, P. (2025) · ACM Transactions on Software Engineering and Methodology · doi:10.1145/3769009 · Cited by 3
A Defence Against Input-Agnostic Backdoor Attacks on Deep Neural Networks
Gao, Y., & Nepal, . (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-65610-2_4 · Cited by 3
Towards Trustworthy Outsourced Deep Neural Networks
Ahmad, L., Dong, B., Samanthula, B. K., Wang, R. Y., & Li, B. H. (2021) · IEEE Cloud Summit · doi:10.1109/ieeecloudsummit52029.2021.00021 · Cited by 3
Verifying the Quality of Outsourced Training on Clouds
Li, P., Wang, Y., Liu, Z., Xu, K., Wang, Q., Shen, C. Q., & Li, Q. L. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-17146-8_7 · Cited by 3
ScanFed: Scalable Behavior-Based Backdoor Detection in Federated Learning
Ning, R., Li, J., Xin, C., Wang, C., Xu, L., Gazda, R., Cho, J.-H., & Wu, H. (2023) · IEEE International Conference on Distributed Computing Systems (ICDCS) · doi:10.1109/icdcs57875.2023.00011 · Cited by 2
An Investigation of Recent Backdoor Attacks and Defenses in Federated Learning
Chen, Q., & Tao, Y. (2023) · International Conference on Fog and Mobile Edge Computing (FMEC) · doi:10.1109/fmec59375.2023.10306127 · Cited by 3
Call White Black: Enhanced Image-Scaling Attack in Industrial Artificial Intelligence Systems
Li, J., Chen, H., Sun, P., Wang, Z., Ni, Z., & Liu, W. (2024) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2023.3342447 · Cited by 3
NLPSweep: A comprehensive defense scheme for mitigating NLP backdoor attacks
Xiang, T., Ouyang, F., Zhang, D., Xie, C., & Wang, H. (2024) · Information Sciences · doi:10.1016/j.ins.2024.120176 · Cited by 3
Identifying Backdoor Attacks in Federated Learning via Anomaly Detection
Mi, Y., Sun, Y., Guan, J., & Zhou, S. (2024) · Lecture notes in computer science · doi:10.1007/978-981-97-2387-4_8 · Cited by 4
Leveraging deep learning-assisted attacks against image obfuscation via federated learning
Tekli, J., Bouna, B. A., Tekli, G., Couturier, R., & Charbel, A. (2024) · Neural Computing and Applications · doi:10.1007/s00521-024-09703-0 · Cited by 3
Liu, H., Qu, W., Jia, J., & Gong, N. Z. (2024) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw63631.2024.00019 · Cited by 5
Backdoor Online Tracing With Evolving Graphs
Jia, C., Chen, J., Ji, S., Cheng, Y., Zheng, H., & Xuan, Q. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3488517 · Cited by 3
Wu, Y., Li, Q., Xiang, Y., Zheng, J., Wu, X., Han, Z., Liu, J., & Niu, W. (2024) · Lecture notes in computer science · doi:10.1007/978-981-96-0821-8_29 · Cited by 3
Lee, T., Lee, S., & Kwon, H. (2025) · IEEE Access · doi:10.1109/access.2024.3474088 · Cited by 5
Unified Architectural Support for Secure and Robust Deep Learning
Javaheripi, M., Chen, H., & Koushanfar, F. (2020) · ACM/IEEE Design Automation Conference (DAC) · doi:10.1109/dac18072.2020.9218575 · Cited by 3
Jia, J., Wang, B., & Gong, N. Z. (2021) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/3433210.3437519 · Cited by 4
MMGuard: Automatically Protecting On-Device Deep Learning Models in Android Apps
Hua, J., Li, Y., & Wang, H. (2021) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw53761.2021.00019 · Cited by 3
Data Correction For Enhancing Classification Accuracy By Unknown Deep Neural Network Classifiers
Kwon, H., Yoon, H., & Choi, D. (2021) · KSII Transactions on Internet and Information Systems · doi:10.3837/tiis.2021.09.009 · Cited by 3
An Adaptive Black-box Defense against Trojan Attacks on Text Data
Sharadgah, F., Khreishah, A. A., Al‐Ayyoub, M., Jararweh, Y., Liu, G., Khalil, I. M., Almutiry, M., & Saeed, N. (2021) · International Conference on Social Networks Analysis, Management and Security (SNAMS) · doi:10.1109/snams53716.2021.9732112 · Cited by 3
Amplification trojan network: Attack deep neural networks by amplifying their inherent weakness
Hu, Z., Zhu, J., Zhang, B., & Hu, X. (2022) · Neurocomputing · doi:10.1016/j.neucom.2022.07.018 · Cited by 4
A Universal Identity Backdoor Attack against Speaker Verification based on Siamese Network
Zhao, H., Du, W. D., Guo, J., & Liu, G. (2022) · Interspeech (USB) · doi:10.21437/interspeech.2022-446 · Cited by 6
Backdoor Defence for Voice Print Recognition Model Based on Speech Enhancement and Weight Pruning
Zhu, J., Chen, L., Xu, D., & Zhao, W. (2022) · IEEE Access · doi:10.1109/access.2022.3217322 · Cited by 4
Adaptive Backdoor Attack against Deep Neural Networks
He, H., Zhu, Z., & Zhang, X. (2023) · Computer Modeling in Engineering & Sciences · doi:10.32604/cmes.2023.025923 · Cited by 4
Self-citationPoisoning attacks on face authentication systems by using the generative deformation model
Chan, C.-T., Huang, S.-H., & Choy, P. P. (2023) · Multimedia Tools and Applications · doi:10.1007/s11042-023-14695-5 · Cited by 3
Physical Backdoor Attack using Multi-Trigger to Same Class
Singh, G. P., Kumar, J., & Mohapatra, R. K. (2023) · International Conference on Artificial Intelligence and Signal Processing (AISP) · doi:10.1109/aisp57993.2023.10134794 · Cited by 3
Ma, B., Wang, J., Wang, D., & Meng, B. (2023) · Neural Networks · doi:10.1016/j.neunet.2023.09.036 · Cited by 4
Mitigating Backdoor Attacks on Deep Neural Networks
Fu, H., Sarmadi, A., Krishnamurthy, P., Garg, S., & Khorrami, F. (2023) · Springer eBooks · doi:10.1007/978-3-031-40677-5_16 · Cited by 3
The Silent Manipulator: A Practical and Inaudible Backdoor Attack against Speech Recognition Systems
Zheng, Z., Li, X., Yan, C., Ji, X., & Xu, W. (2023) · ACM International Conference on Multimedia (ACM MM) · doi:10.1145/3581783.3613843 · Cited by 5
On the Detection of Image-Scaling Attacks in Machine Learning
Quiring, E., Müller, A., & Rieck, K. (2023) · Annual Computer Security Applications Conference · doi:10.1145/3627106.3627134 · Cited by 3
DEFENSES FOR MACHINE LEARNING MODELS FROM ADVERSARIAL ATTACKS
Григорьевна, Ф. С., & Bezzateev, S. V. (2023) · T-Comm - Телекоммуникации и Транспорт · doi:10.36724/2072-8735-2023-17-10-28-42 · Cited by 5
Li, L., Xu, C., & Zhang, P. (2024) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-031-51399-2_6 · Cited by 3
Defending Against Backdoor Attacks by Quarantine Training
Yu, C., & Zhang, Y. (2024) · IEEE Access · doi:10.1109/access.2024.3354385 · Cited by 3
TriMPA: Triggerless Targeted Model Poisoning Attack in DNN
Manna, D., & Tripathy, S. (2024) · IEEE Transactions on Computational Social Systems · doi:10.1109/tcss.2023.3349269 · Cited by 5
Research Progress on Security and Privacy of Federated Learning: A Survey
Ma, X., & Yan, M. (2024) · Wireless Personal Communications · doi:10.1007/s11277-024-11372-0 · Cited by 3
Like teacher, like pupil: Transferring backdoors via feature-based knowledge distillation
Chen, J., Cao, Z., Chen, R., Zheng, H., Li, X., Xuan, Q., & Yang, X. (2024) · Computers & Security · doi:10.1016/j.cose.2024.104041 · Cited by 3
Generation and deployment of honeytokens in relational databases for cyber deception
Prabhaker, N., Bopche, G. S., & Arock, M. (2024) · Computers & Security · doi:10.1016/j.cose.2024.104032 · Cited by 8
He, X., Xu, Q., Wang, J., Rubinstein, B. I. P., & Cohn, T. (2024) · Transactions of the Association for Computational Linguistics · doi:10.1162/tacl_a_00684 · Cited by 6
Stealth Backdoor Attack for Remote Sensing Image Classification
Hua, Y., Liu, L., Cao, J., & Chen, H. (2024) · IEEE International Conference on Electronic Information and Communication Technology (ICEICT) · doi:10.1109/iceict61637.2024.10671242 · Cited by 3
Artemis: Defending Against Backdoor Attacks via Distribution Shift
Xue, M., Wang, Z., Zhang, Q., Gong, X., Liu, Z., & Chen, Y. (2024) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2024.3472117 · Cited by 3
Metadata
- Authors
- Liu, Y., Ma, S., Aafer, Y., Lee, W.-C., Zhai, J., Wang, W., & Zhang, X.
- Affiliations
- Purdue University West Lafayette (US)
- Nanjing University (CN)
- Venue
- Proceedings 2018 Network and Distributed System Security Symposium
- Publisher
- Internet Society
- Published
- 2018
- OpenAlex
- W2753783305
- Cited by
- 1,270
- References
- 49
- Citations by year
- 2026: 114 · 2025: 193 · 2024: 206 · 2023: 184 · 2022: 149 · 2021: 185 · 2020: 153 · 2019: 59 · 2018: 26
- FWCI
- 43.17
- Type
- conference paper
- Language
- en
- Open access
- hybrid
- doi.org
- Licence
- public-domain
- Locations
- Network and Distributed System Security Symposium (publishedVersion, public-domain)
- Rutgers University Community Repository (Rutgers University) (submittedVersion)
- Purdue e-Pubs (Purdue University System) (submittedVersion)
- Funders
- National Science Foundation (1748764, 1320444, 1409668)
- Defense Advanced Research Projects Agency (FA-8650-15-C-7562, FA8650-15C)
- Office of Naval Research (N000141712947, N000141410468)
- Sandia National Laboratories (1701331)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Physical Sciences › Computer Science › Hardware and Architecture › Physical Unclonable Functions (PUFs) and Hardware Security
- Keywords
- neural network security, stealthy attacks, model poisoning, autonomous driving safety
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
