{"id":"https://openalex.org/W4385966035","doi":"https://doi.org/10.48550/arxiv.2308.08505","title":"Test-Time Poisoning Attacks Against Test-Time Adaptation Models","display_name":"Test-Time Poisoning Attacks Against Test-Time Adaptation Models","publication_year":2023,"publication_date":"2023-08-16","ids":{"openalex":"https://openalex.org/W4385966035","doi":"https://doi.org/10.48550/arxiv.2308.08505"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2308.08505","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2308.08505","pdf_url":"https://arxiv.org/pdf/2308.08505","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2308.08505","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5002440210","display_name":"Tianshuo Cong","orcid":"https://orcid.org/0000-0003-3189-8223","observed_orcids":["https://orcid.org/0000-0003-3189-8223"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cong, Tianshuo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074889369","display_name":"Xinlei He","orcid":"https://orcid.org/0009-0007-3879-9080","observed_orcids":["https://orcid.org/0009-0007-3879-9080","https://orcid.org/0000-0001-5725-2848"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"He, Xinlei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040894182","display_name":"Yun Shen","orcid":"https://orcid.org/0000-0002-9850-122X","observed_orcids":["https://orcid.org/0000-0002-9850-122X","https://orcid.org/0009-0004-6694-233X"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shen, Yun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5100354608","display_name":"Yang Zhang","orcid":"https://orcid.org/0000-0001-9229-7689","observed_orcids":["https://orcid.org/0000-0001-9229-7689"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Yang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/test-time-adaptation","display_name":"test-time adaptation","score":0.996999979019165},{"id":"https://openalex.org/keywords/distribution-shift","display_name":"distribution shift","score":0.8709999918937683},{"id":"https://openalex.org/keywords/domain-adaptation","display_name":"domain adaptation","score":0.4269999861717224},{"id":"https://openalex.org/keywords/dua","display_name":"dua","score":0.9079999923706055},{"id":"https://openalex.org/keywords/tents","display_name":"tents","score":0.9980000257492065},{"id":"https://openalex.org/keywords/recurrent-pregnancy-loss","display_name":"recurrent pregnancy loss","score":0.9760000109672546},{"id":"https://openalex.org/keywords/surrogate-modeling","display_name":"surrogate models","score":0.7020000219345093},{"id":"https://openalex.org/keywords/model-security","display_name":"model security","score":0.4569999873638153},{"id":"https://openalex.org/keywords/transfer-learning","display_name":"transfer learning","score":0.4429999887943268}],"concepts":[{"id":"https://openalex.org/C139807058","wikidata":"https://www.wikidata.org/wiki/Q352374","display_name":"Adaptation (eye)","level":2,"score":0.6530901789665222},{"id":"https://openalex.org/C2777267654","wikidata":"https://www.wikidata.org/wiki/Q3519023","display_name":"Test (biology)","level":2,"score":0.6450471878051758},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6394335627555847},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.5665708184242249},{"id":"https://openalex.org/C150899416","wikidata":"https://www.wikidata.org/wiki/Q1820378","display_name":"Transfer of learning","level":2,"score":0.4555474817752838},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.4501016139984131},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4391208291053772},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4368003308773041},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.43571698665618896},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.42893195152282715},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.1125078797340393},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.09056907892227173},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C169760540","wikidata":"https://www.wikidata.org/wiki/Q207011","display_name":"Neuroscience","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2308.08505","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2308.08505","pdf_url":"https://arxiv.org/pdf/2308.08505","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2308.08505","doi":"https://doi.org/10.48550/arxiv.2308.08505","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2308.08505","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2308.08505","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2308.08505","pdf_url":"https://arxiv.org/pdf/2308.08505","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2770234245","https://openalex.org/W96612179","https://openalex.org/W4229499248","https://openalex.org/W2566006169","https://openalex.org/W2987774938","https://openalex.org/W4256492088","https://openalex.org/W632915154","https://openalex.org/W2055733372","https://openalex.org/W3022067003","https://openalex.org/W4297821278"],"abstract_inverted_index":{"Deploying":[0],"machine":[1],"learning":[2],"(ML)":[3],"models":[4,53,120,159],"in":[5,125,221],"the":[6,17,46,50,60,71,75,80,84,115,126,134,157,164,172,184,196,199,229,238],"wild":[7],"is":[8],"challenging":[9],"as":[10,188,190],"it":[11,93],"suffers":[12],"from":[13,83,108,202],"distribution":[14],"shifts,":[15],"where":[16],"model":[18,77,201],"trained":[19],"on":[20,156],"an":[21],"original":[22],"domain":[23],"cannot":[24,123],"generalize":[25],"well":[26],"to":[27,44,57,70,79,163,178,194,204],"unforeseen":[28],"diverse":[29],"transfer":[30],"domains.":[31],"To":[32],"address":[33],"this":[34,130],"challenge,":[35],"several":[36],"test-time":[37,101,136,179,234],"adaptation":[38],"(TTA)":[39],"methods":[40,174],"have":[41],"been":[42],"proposed":[43],"improve":[45],"generalization":[47],"ability":[48],"of":[49,65,74,118,198,231,240],"target":[51,76,165,200],"pre-trained":[52],"under":[54],"test":[55,85,88],"data":[56],"cope":[58],"with":[59],"shifted":[61],"distribution.":[62],"The":[63],"success":[64],"TTA":[66,142,166,173,210,241],"can":[67,186],"be":[68],"credited":[69],"continuous":[72],"fine-tuning":[73],"according":[78],"distributional":[81],"hint":[82],"samples":[86,154,193],"during":[87,114],"time.":[89],"Despite":[90],"being":[91],"powerful,":[92],"also":[94],"opens":[95],"a":[96,213],"new":[97],"attack":[98,138],"surface,":[99],"i.e.,":[100],"poisoning":[102,110,137,180,235],"attacks,":[103],"which":[104],"are":[105,175,217],"substantially":[106],"different":[107],"previous":[109],"attacks":[111,236],"that":[112,171,209],"occur":[113],"training":[116,127],"time":[117],"ML":[119],"(i.e.,":[121],"adversaries":[122],"intervene":[124],"process).":[128],"In":[129],"paper,":[131],"we":[132,151,226],"perform":[133],"first":[135],"against":[139,233],"four":[140],"mainstream":[141],"methods,":[143],"including":[144],"TTT,":[145],"DUA,":[146],"TENT,":[147],"and":[148,160],"RPL.":[149],"Concretely,":[150],"generate":[152],"poisoned":[153,192],"based":[155],"surrogate":[158],"feed":[161,187],"them":[162],"models.":[167],"Experimental":[168],"results":[169,207],"show":[170],"generally":[176],"vulnerable":[177],"attacks.":[181],"For":[182],"instance,":[183],"adversary":[185],"few":[189],"10":[191],"degrade":[195],"performance":[197],"76.20%":[203],"41.83%.":[205],"Our":[206],"demonstrate":[208],"algorithms":[211],"lacking":[212],"rigorous":[214],"security":[215],"assessment":[216],"unsuitable":[218],"for":[219,228],"deployment":[220],"real-life":[222],"scenarios.":[223],"As":[224],"such,":[225],"advocate":[227],"integration":[230],"defenses":[232],"into":[237],"design":[239],"methods.":[242]},"counts_by_year":[{"year":2024,"cited_by_count":1}],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2025-10-10T00:00:00"}