{"id":"https://openalex.org/W3194031147","doi":null,"title":"Quantization Backdoors to Deep Learning Models.","display_name":"Quantization Backdoors to Deep Learning Models.","publication_year":2021,"publication_date":"2021-08-20","ids":{"openalex":"https://openalex.org/W3194031147","mag":"3194031147"},"language":"en","primary_location":{"id":"mag:3194031147","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/pdf/2108.09187.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2108.09187.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114928939","display_name":"Hua Ma","orcid":"https://orcid.org/0000-0002-9069-7731","observed_orcids":["https://orcid.org/0000-0002-9069-7731"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hua Ma","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-9069-7731","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039324800","display_name":"Huming Qiu","orcid":"https://orcid.org/0009-0004-5385-9414","observed_orcids":["https://orcid.org/0009-0004-5385-9414","https://orcid.org/0009-0008-3954-4538"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Huming Qiu","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0009-0004-5385-9414","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067969908","display_name":"Yansong Gao","orcid":"https://orcid.org/0000-0001-6029-5064","observed_orcids":["https://orcid.org/0000-0001-6029-5064"]},"institutions":[{"id":"https://openalex.org/I36399199","display_name":"Nanjing University of Science and Technology","ror":"https://ror.org/00xp9wg62","country_code":"CN","type":"education","lineage":["https://openalex.org/I36399199"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yansong Gao","raw_affiliation_strings":["Nanjing University of Science and Technology"],"raw_orcid":"https://orcid.org/0000-0001-6029-5064","affiliations":[{"raw_affiliation_string":"Nanjing University of Science and Technology","institution_ids":["https://openalex.org/I36399199"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100410710","display_name":"Zhi Zhang","orcid":"https://orcid.org/0000-0003-3604-5369","observed_orcids":["https://orcid.org/0000-0003-3604-5369"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhi Zhang","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0003-3604-5369","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086357020","display_name":"Alsharif Abuadbba","orcid":"https://orcid.org/0000-0001-9695-7947","observed_orcids":["https://orcid.org/0000-0001-9695-7947"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Alsharif Abuadbba","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0001-9695-7947","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048592388","display_name":"Anmin Fu","orcid":"https://orcid.org/0000-0002-1632-5737","observed_orcids":["https://orcid.org/0000-0002-1632-5737"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Anmin Fu","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-1632-5737","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053660700","display_name":"Said F. Al-Sarawi","orcid":"https://orcid.org/0000-0002-3242-8197","observed_orcids":["https://orcid.org/0000-0002-3242-8197"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Said F. Al-Sarawi","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-3242-8197","affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5040978000","display_name":"Derek Abbott","orcid":"https://orcid.org/0000-0002-0945-2674","observed_orcids":["https://orcid.org/0000-0002-0945-2674"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Derek Abbott","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-0945-2674","affiliations":[]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0003000000142492354,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor-attacks","display_name":"backdoor attacks","score":0.8510000109672546},{"id":"https://openalex.org/keywords/model-quantization","display_name":"model quantization","score":0.8579999804496765},{"id":"https://openalex.org/keywords/tensorflow-lite","display_name":"TensorFlow Lite","score":0.7549999952316284},{"id":"https://openalex.org/keywords/post-training-quantization","display_name":"post-training quantization","score":0.9350000023841858},{"id":"https://openalex.org/keywords/int8-quantization","display_name":"INT8 quantization","score":0.6330000162124634},{"id":"https://openalex.org/keywords/backdoor-detection","display_name":"backdoor detection","score":0.5189999938011169},{"id":"https://openalex.org/keywords/strip","display_name":"strip","score":0.9520000219345093},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.8320000171661377},{"id":"https://openalex.org/keywords/deep-learning-model-security","display_name":"deep learning model security","score":0.5339999794960022},{"id":"https://openalex.org/keywords/trigger-based-attacks","display_name":"trigger-based attacks","score":0.4390000104904175}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9848964214324951},{"id":"https://openalex.org/C28855332","wikidata":"https://www.wikidata.org/wiki/Q198099","display_name":"Quantization (signal processing)","level":2,"score":0.710722029209137},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.701187014579773},{"id":"https://openalex.org/C138236772","wikidata":"https://www.wikidata.org/wiki/Q25098575","display_name":"Edge device","level":3,"score":0.5124495625495911},{"id":"https://openalex.org/C175291020","wikidata":"https://www.wikidata.org/wiki/Q1156822","display_name":"Offset (computer science)","level":2,"score":0.49378690123558044},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4697580337524414},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.43326759338378906},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4077227711677551},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3289419412612915},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.31683459877967834},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.08245992660522461},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.08105608820915222}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:3194031147","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/pdf/2108.09187.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null}],"best_oa_location":{"id":"mag:3194031147","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/pdf/2108.09187.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":44,"referenced_works":["https://openalex.org/W1686810756","https://openalex.org/W2067713319","https://openalex.org/W2112796928","https://openalex.org/W2194775991","https://openalex.org/W2267635276","https://openalex.org/W2300242332","https://openalex.org/W2402144811","https://openalex.org/W2588598812","https://openalex.org/W2748789698","https://openalex.org/W2753783305","https://openalex.org/W2774423163","https://openalex.org/W2777406049","https://openalex.org/W2796004214","https://openalex.org/W2810065831","https://openalex.org/W2845210056","https://openalex.org/W2897865027","https://openalex.org/W2934843808","https://openalex.org/W2947864246","https://openalex.org/W2963207607","https://openalex.org/W2963771448","https://openalex.org/W2965527544","https://openalex.org/W2965628707","https://openalex.org/W2966187620","https://openalex.org/W2966689772","https://openalex.org/W2971661634","https://openalex.org/W2975350394","https://openalex.org/W2979693078","https://openalex.org/W2990270730","https://openalex.org/W2996538923","https://openalex.org/W3008515144","https://openalex.org/W3035078287","https://openalex.org/W3044223678","https://openalex.org/W3047587361","https://openalex.org/W3080770848","https://openalex.org/W3087086069","https://openalex.org/W3088733693","https://openalex.org/W3093348380","https://openalex.org/W3104151879","https://openalex.org/W3117511472","https://openalex.org/W3118608800","https://openalex.org/W3157459315","https://openalex.org/W3159603021","https://openalex.org/W3161325720","https://openalex.org/W3166874749"],"related_works":["https://openalex.org/W4367663504","https://openalex.org/W4400270522","https://openalex.org/W4386880702","https://openalex.org/W4417149523","https://openalex.org/W4403888301","https://openalex.org/W4392146740","https://openalex.org/W7204830243","https://openalex.org/W7165393063","https://openalex.org/W7111106881","https://openalex.org/W7161592181"],"abstract_inverted_index":{"There":[0],"is":[1,62,133,195,210],"currently":[2],"a":[3,63,79,84,107,112,127,218,241],"burgeoning":[4],"demand":[5],"for":[6],"deploying":[7],"deep":[8],"learning":[9],"(DL)":[10],"models":[11,30,158,194,264],"on":[12,70],"ubiquitous":[13],"edge":[14],"Internet":[15],"of":[16,126,167,191,259,262],"Things":[17],"devices":[18,49,72],"attributing":[19],"to":[20,105,149,181,224],"their":[21],"low":[22],"latency":[23],"and":[24,36,54,73,178],"high":[25],"privacy":[26],"preservation.":[27],"However,":[28],"DL":[29,68,263],"are":[31,52,58],"often":[32],"large":[33,80],"in":[34,123,164,185,212],"size":[35],"require":[37],"large-scale":[38],"computation,":[39],"which":[40,66,216],"prevents":[41],"them":[42],"from":[43],"being":[44],"placed":[45],"directly":[46],"onto":[47],"IoT":[48],"where":[50],"resources":[51],"constrained":[53],"32-bit":[55],"floating-point":[56],"operations":[57],"unavailable.":[59],"Model":[60],"quantization":[61,100,147,254,266],"pragmatic":[64],"solution,":[65],"enables":[67],"deployment":[69],"mobile":[71],"embedded":[74],"systems":[75],"by":[76,139],"effortlessly":[77],"post-quantizing":[78],"high-precision":[81],"model":[82,87,91,115,201,253],"into":[83,197],"small":[85],"low-precision":[86],"while":[88,231],"retaining":[89],"the":[90,98,124,131,140,144,165,183,186,192,203,208,213,229,250],"inference":[92],"accuracy.":[93],"\r\nThis":[94],"work":[95,238],"reveals":[96],"that":[97,111,116,153,240],"standard":[99,204],"operation":[101],"can":[102,136],"be":[103,137],"abused":[104],"activate":[106],"backdoor.":[108],"We":[109,151],"demonstrate":[110],"full-precision":[113],"backdoored":[114,157],"does":[117],"not":[118],"have":[119],"any":[120],"backdoor":[121,132,161,184,209],"effect":[122,162],"presence":[125,166],"trigger":[128,168],"--":[129,135],"as":[130,175],"dormant":[134],"activated":[138,211],"default":[141],"TensorFlow-Lite":[142],"quantization,":[143,207],"only":[145],"product-ready":[146],"framework":[148],"date.":[150],"ascertain":[152],"all":[154],"trained":[155],"float-32":[156,187,193],"exhibit":[159],"no":[160],"even":[163,267],"inputs.":[169,236],"State-of-the-art":[170],"frontend":[171,271],"detection":[172],"approaches,":[173],"such":[174],"Neural":[176],"Cleanse":[177],"STRIP,":[179],"fail":[180],"identify":[182],"models.":[188],"When":[189],"each":[190],"converted":[196],"an":[198],"int-8":[199],"format":[200],"through":[202],"TFLite":[205],"post-training":[206,252],"quantized":[214],"model,":[215],"shows":[217],"stable":[219],"attack":[220],"success":[221],"rate":[222],"close":[223],"100%":[225],"upon":[226,234],"inputs":[227],"with":[228],"trigger,":[230],"behaves":[232],"normally":[233],"non-trigger":[235],"This":[237],"highlights":[239],"stealthy":[242],"security":[243,257],"threat":[244],"occurs":[245],"when":[246],"end":[247],"users":[248],"utilize":[249],"on-device":[251],"toolkits,":[255],"informing":[256],"researchers":[258],"cross-platform":[260],"overhaul":[261],"post":[265],"if":[268],"they":[269],"pass":[270],"inspections.":[272]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":2}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2021-08-30T00:00:00"}