{"id":"https://openalex.org/W4252979261","doi":"https://doi.org/10.1109/iccd.2017.16","title":"Neural Trojans","display_name":"Neural Trojans","publication_year":2017,"publication_date":"2017-11-01","ids":{"openalex":"https://openalex.org/W4252979261","doi":"https://doi.org/10.1109/iccd.2017.16","mag":"2772825438"},"language":"en","primary_location":{"id":"doi:10.1109/iccd.2017.16","doi":"https://doi.org/10.1109/iccd.2017.16","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccd.2017.16","pdf_url":null,"source":{"id":"https://openalex.org/S4210174938","display_name":"IEEE International Conference on Computer Design: VLSI in Computers and Processors (ICCD)","issn_l":"1063-6404","issn":["1063-6404","2576-6996"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["jufo-1"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE International Conference on Computer Design (ICCD)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/1710.00942","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100657633","display_name":"Yuntao Liu","orcid":"https://orcid.org/0000-0001-8213-582X","observed_orcids":["https://orcid.org/0000-0001-8213-582X"]},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yuntao Liu","raw_affiliation_strings":["University of Maryland, College Park"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland, College Park","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020319459","display_name":"Yang Xie","orcid":"https://orcid.org/0000-0001-6127-3908","observed_orcids":["https://orcid.org/0000-0001-6127-3908"]},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yang Xie","raw_affiliation_strings":["University of Maryland, College Park"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland, College Park","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089770783","display_name":"Ankur Srivastava","orcid":"https://orcid.org/0000-0002-5445-904X","observed_orcids":["https://orcid.org/0000-0002-5445-904X"]},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ankur Srivastava","raw_affiliation_strings":["University of Maryland, College Park"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland, College Park","institution_ids":["https://openalex.org/I66946132"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I66946132"],"apc_list":null,"apc_paid":null,"fwci":6.2768,"has_fulltext":true,"cited_by_count":299,"citation_normalized_percentile":{"value":0.97469871,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"45","last_page":"48"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5189999938011169,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5189999938011169,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.4708999991416931,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.00570000009611249,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/neural-network-security","display_name":"neural network security","score":0.6930000185966492},{"id":"https://openalex.org/keywords/neural-network-hardware","display_name":"neural network hardware","score":0.49300000071525574},{"id":"https://openalex.org/keywords/ip-core","display_name":"IP core","score":0.7419999837875366},{"id":"https://openalex.org/keywords/reskilling","display_name":"retraining","score":0.703000009059906},{"id":"https://openalex.org/keywords/input-preprocessing","display_name":"input preprocessing","score":0.9890000224113464},{"id":"https://openalex.org/keywords/reconfigurable-neural-networks","display_name":"reconfigurable neural networks","score":0.6930000185966492}],"concepts":[{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.8923285007476807},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7116141319274902},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.7008888125419617},{"id":"https://openalex.org/C2777338717","wikidata":"https://www.wikidata.org/wiki/Q1762621","display_name":"Vendor","level":2,"score":0.6989342570304871},{"id":"https://openalex.org/C34736171","wikidata":"https://www.wikidata.org/wiki/Q918333","display_name":"Preprocessor","level":2,"score":0.5451663136482239},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5214804410934448},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.44453486800193787},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.394388884305954},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3430027365684509},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.12473812699317932},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.07023316621780396},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1109/iccd.2017.16","doi":"https://doi.org/10.1109/iccd.2017.16","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccd.2017.16","pdf_url":null,"source":{"id":"https://openalex.org/S4210174938","display_name":"IEEE International Conference on Computer Design: VLSI in Computers and Processors (ICCD)","issn_l":"1063-6404","issn":["1063-6404","2576-6996"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["jufo-1"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE International Conference on Computer Design (ICCD)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:1710.00942","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/1710.00942","pdf_url":"https://arxiv.org/pdf/1710.00942","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.1710.00942","doi":"https://doi.org/10.48550/arxiv.1710.00942","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.1710.00942","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},{"id":"mag:2772825438","doi":null,"is_oa":false,"landing_page_url":"http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=8119189","pdf_url":null,"source":{"id":"https://openalex.org/S4210174938","display_name":"IEEE International Conference on Computer Design: VLSI in Computers and Processors (ICCD)","issn_l":"1063-6404","issn":["1063-6404","2576-6996"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["jufo-1"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"International Conference on Computer Design","raw_type":null}],"best_oa_location":{"id":"pmh:oai:arXiv.org:1710.00942","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/1710.00942","pdf_url":"https://arxiv.org/pdf/1710.00942","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4252979261.pdf","grobid_xml":"https://content.openalex.org/works/W4252979261.grobid-xml"},"referenced_works_count":13,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W1945616565","https://openalex.org/W2112507308","https://openalex.org/W2112796928","https://openalex.org/W2122646361","https://openalex.org/W2125908420","https://openalex.org/W2161998562","https://openalex.org/W2174868984","https://openalex.org/W2180612164","https://openalex.org/W2194775991","https://openalex.org/W2293844262","https://openalex.org/W2408141691","https://openalex.org/W2603766943"],"related_works":["https://openalex.org/W3013170989","https://openalex.org/W4200512086","https://openalex.org/W3097631606","https://openalex.org/W1534499320","https://openalex.org/W6964258170","https://openalex.org/W2753783305","https://openalex.org/W3132092085","https://openalex.org/W3124616678","https://openalex.org/W3151939984","https://openalex.org/W4380137220"],"abstract_inverted_index":{"While":[0],"neural":[1,40,68,80,84,150,171],"networks":[2],"demonstrate":[3],"stronger":[4],"capabilities":[5],"in":[6,66],"pattern":[7],"recognition":[8],"nowadays,":[9],"they":[10],"are":[11,109,163],"also":[12,27],"becoming":[13],"larger":[14],"and":[15,94,103,166],"deeper.":[16],"As":[17,52],"a":[18,25,39],"result,":[19],"the":[20,58,67,70,83,107,143,149,155,170],"effort":[21],"needed":[22],"to":[23,37,119,135],"train":[24],"network":[26,41],"increases":[28],"dramatically.":[29],"In":[30,154],"many":[31],"cases,":[32],"it":[33,146],"is":[34,90,117,133,173],"more":[35],"practical":[36],"use":[38],"intellectual":[42],"property":[43],"(IP)":[44],"that":[45,88,148],"an":[46,91],"IP":[47,71,151,172],"vendor":[48,72],"has":[49],"already":[50],"trained.":[51],"we":[53],"do":[54],"not":[55],"know":[56],"about":[57,169],"training":[59],"process,":[60],"there":[61],"can":[62],"be":[63,152],"security":[64],"threats":[65],"IP:":[69],"(attacker)":[73],"may":[74],"embed":[75],"hidden":[76],"malicious":[77],"functionality,":[78],"i.e":[79],"Trojans,":[81],"into":[82],"IP.":[85],"We":[86],"show":[87],"this":[89],"effective":[92],"attack":[93],"provide":[95],"three":[96],"mitigation":[97],"techniques:":[98],"input":[99,104,113,156],"anomaly":[100,114],"detection,":[101],"re-training,":[102],"preprocessing.":[105],"All":[106],"techniques":[108],"proven":[110],"effective.":[111],"The":[112,130],"detection":[115],"approach":[116,132],"able":[118,134],"detect":[120],"99.8%":[121],"of":[122,138,160],"Trojan":[123,139,144,161],"triggers":[124,140,162],"although":[125,145],"with":[126],"12.2%":[127],"false":[128],"positive.":[129],"re-training":[131],"prevent":[136],"94.1%":[137],"from":[141],"triggering":[142],"requires":[147],"reconfigurable.":[153],"preprocessing":[157],"approach,":[158],"90.2%":[159],"rendered":[164],"ineffective":[165],"no":[167],"assumption":[168],"needed.":[174]},"counts_by_year":[{"year":2026,"cited_by_count":15},{"year":2025,"cited_by_count":48},{"year":2024,"cited_by_count":51},{"year":2023,"cited_by_count":35},{"year":2022,"cited_by_count":37},{"year":2021,"cited_by_count":56},{"year":2020,"cited_by_count":36},{"year":2019,"cited_by_count":15},{"year":2018,"cited_by_count":5},{"year":2017,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2022-05-12T00:00:00"}