中文
相关论文

相关论文: Mind Your Heart: Stealthy Backdoor Attack on Dynam…

200 篇论文

The introduction of robust optimisation has pushed the state-of-the-art in defending against adversarial attacks. Notably, the state-of-the-art projected gradient descent (PGD)-based training method has been shown to be universally and…

计算机视觉与模式识别 · 计算机科学 2023-01-12 Ezekiel Soremekun , Sakshi Udeshi , Sudipta Chattopadhyay

Typical deep neural network (DNN) backdoor attacks are based on triggers embedded in inputs. Existing imperceptible triggers are computationally expensive or low in attack success. In this paper, we propose a new backdoor trigger, which is…

计算机视觉与模式识别 · 计算机科学 2022-08-22 Yulong Wang , Minghui Zhao , Shenghong Li , Xin Yuan , Wei Ni

Federated Graph Neural Network (FedGNN) integrate federated learning (FL) with graph neural networks (GNNs) to enable privacy-preserving training on distributed graph data. Vertical Federated Graph Neural Network (VFGNN), a key branch of…

机器学习 · 计算机科学 2025-01-27 Jirui Yang , Peng Chen , Zhihui Lu , Ruijun Deng , Qiang Duan , Jianping Zeng

Backdoor attacks impose a new threat in Deep Neural Networks (DNNs), where a backdoor is inserted into the neural network by poisoning the training dataset, misclassifying inputs that contain the adversary trigger. The major challenge for…

机器学习 · 计算机科学 2024-09-26 Yue Wang , Wenqing Li , Esha Sarkar , Muhammad Shafique , Michail Maniatakos , Saif Eddin Jabari

The challenge of WAD (web attack detection) is growing as hackers continuously refine their methods to evade traditional detection. Deep learning models excel in handling complex unknown attacks due to their strong generalization and…

机器学习 · 计算机科学 2024-06-19 Lijia Shi , Shihao Dong

Graph neural network (GNN) have demonstrated exceptional performance in solving critical problems across diverse domains yet remain susceptible to backdoor attacks. Existing studies on backdoor attack for graph classification are limited to…

机器学习 · 计算机科学 2026-04-09 Md Nabi Newaz Khan , Abdullah Arafat Miah , Yu Bi

Distributed deep neural networks (DNNs) have been shown to reduce the computational burden of mobile devices and decrease the end-to-end inference latency in edge computing scenarios. While distributed DNNs have been studied, to the best of…

机器学习 · 计算机科学 2025-10-02 Milin Zhang , Mohammad Abdi , Jonathan Ashdown , Francesco Restuccia

Diffusion models are state-of-the-art deep learning generative models that are trained on the principle of learning forward and backward diffusion processes via the progressive addition of noise and denoising. In this paper, we aim to fool…

机器学习 · 计算机科学 2025-04-22 Orson Mengara

Deep neural networks (DNN) have shown superior performance in a variety of tasks. As they rapidly evolve, their escalating computation and memory demands make it challenging to deploy them on resource-constrained edge devices. Though…

机器学习 · 计算机科学 2021-09-07 Jiaqi Gu , Hanqing Zhu , Chenghao Feng , Mingjie Liu , Zixuan Jiang , Ray T. Chen , David Z. Pan

Recent work has introduced attacks that extract the architecture information of deep neural networks (DNN), as this knowledge enhances an adversary's capability to conduct black-box attacks against the model. This paper presents the first…

Recent studies have proven that deep neural networks are vulnerable to backdoor attacks. Specifically, by mixing a small number of poisoned samples into the training set, the behavior of the trained model can be maliciously controlled.…

计算机视觉与模式识别 · 计算机科学 2022-06-07 Pengfei Xia , Ziqiang Li , Wei Zhang , Bin Li

Poisoning-based backdoor attacks expose vulnerabilities in the data preparation stage of deep neural network (DNN) training. The DNNs trained on the poisoned dataset will be embedded with a backdoor, making them behave well on clean data…

计算机视觉与模式识别 · 计算机科学 2024-05-10 Binxiao Huang , Jason Chun Lok , Chang Liu , Ngai Wong

In a backdoor attack, an attacker injects corrupted examples into the training set. The goal of the attacker is to cause the final trained model to predict the attacker's desired target label when a predefined trigger is added to test…

机器学习 · 计算机科学 2022-10-13 Jonathan Hayase , Sewoong Oh

In recent years, the security issues of artificial intelligence have become increasingly prominent due to the rapid development of deep learning research and applications. Backdoor attack is an attack targeting the vulnerability of deep…

密码学与安全 · 计算机科学 2023-12-14 Peixin Zhang , Jun Sun , Mingtian Tan , Xinyu Wang

Deep neural networks (DNNs) are proved to be vulnerable against backdoor attacks. A backdoor is often embedded in the target DNNs through injecting a backdoor trigger into training examples, which can cause the target DNNs misclassify an…

机器学习 · 计算机科学 2022-02-28 Junfeng Guo , Ang Li , Cong Liu

Backdoor attacks on deep neural networks (DNNs) have emerged as a significant security threat, allowing adversaries to implant hidden malicious behaviors during the model training phase. Pre-processing-based defense, which is one of the…

密码学与安全 · 计算机科学 2025-02-27 Yukun Chen , Shuo Shao , Enhao Huang , Yiming Li , Pin-Yu Chen , Zhan Qin , Kui Ren

Deep neural networks are normally executed in the forward direction. However, in this work, we identify a vulnerability that enables models to be trained in both directions and on different tasks. Adversaries can exploit this capability to…

机器学习 · 计算机科学 2024-05-20 Guy Amit , Mosh Levy , Yisroel Mirsky

Edge nodes are crucial for detection against multitudes of cyber attacks on Internet-of-Things endpoints and is set to become part of a multi-billion industry. The resource constraints in this novel network infrastructure tier constricts…

密码学与安全 · 计算机科学 2022-07-07 Praneet Singh , Jishnu Jaykumar , Akhil Pankaj , Reshmi Mitra

Deep neural network (DNN) classifiers are vulnerable to backdoor attacks. An adversary poisons some of the training data in such attacks by installing a trigger. The goal is to make the trained DNN output the attacker's desired class…

机器学习 · 计算机科学 2022-10-14 Hadi M. Dolatabadi , Sarah Erfani , Christopher Leckie

Machine learning backdoors have the property that the machine learning model should work as expected on normal inputs, but when the input contains a specific $\textit{trigger}$, it behaves as the attacker desires. Detecting such triggers…

密码学与安全 · 计算机科学 2026-03-12 Eirik Høyheim , Magnus Wiik Eckhoff , Gudmund Grov , Robert Flood , David Aspinall