{"id":"https://openalex.org/W7202262003","doi":"https://doi.org/10.1109/jiot.2026.3723346","title":"Security of Split-Deployed DNNs in IoT Edge Computing: A Structure-Aware Universal Adversarial Attack","display_name":"Security of Split-Deployed DNNs in IoT Edge Computing: A Structure-Aware Universal Adversarial Attack","publication_year":2026,"publication_date":"2026-08-12","ids":{"openalex":"https://openalex.org/W7202262003","doi":"https://doi.org/10.1109/jiot.2026.3723346"},"language":"en","primary_location":{"id":"doi:10.1109/jiot.2026.3723346","doi":"https://doi.org/10.1109/jiot.2026.3723346","is_oa":true,"landing_page_url":"https://doi.org/10.1109/jiot.2026.3723346","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["ccf-c","cwts-core","dongbi-b","jufo-2","norway-2","poland-200","russia-white-list-1"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1109/jiot.2026.3723346","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5123849026","display_name":"Yuchu Lin","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I111950717","display_name":"Macau University of Science and Technology","ror":"https://ror.org/03jqs2n27","country_code":"MO","type":"education","lineage":["https://openalex.org/I111950717","https://openalex.org/I4391767947"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Yuchu Lin","raw_affiliation_strings":["Macau University of Science and Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Macau University of Science and Technology","institution_ids":["https://openalex.org/I111950717"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101902782","display_name":"Jinyu Tian","orcid":"https://orcid.org/0000-0002-2449-5277","observed_orcids":["https://orcid.org/0000-0002-2449-5277"]},"institutions":[{"id":"https://openalex.org/I111950717","display_name":"Macau University of Science and Technology","ror":"https://ror.org/03jqs2n27","country_code":"MO","type":"education","lineage":["https://openalex.org/I111950717","https://openalex.org/I4391767947"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Jinyu Tian","raw_affiliation_strings":["Macau University of Science and Technology"],"raw_orcid":"https://orcid.org/0000-0002-2449-5277","affiliations":[{"raw_affiliation_string":"Macau University of Science and Technology","institution_ids":["https://openalex.org/I111950717"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102859577","display_name":"Wenbo Zhao","orcid":"https://orcid.org/0009-0009-0776-8681","observed_orcids":["https://orcid.org/0009-0009-0776-8681"]},"institutions":[{"id":"https://openalex.org/I4388482657","display_name":"Shenzhen MSU-BIT University","ror":"https://ror.org/02q963474","country_code":"CN","type":"education","lineage":["https://openalex.org/I4388482657"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenbo Zhao","raw_affiliation_strings":["Shenzhen MSU-BIT University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shenzhen MSU-BIT University","institution_ids":["https://openalex.org/I4388482657"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006868259","display_name":"Qiuran Yao","orcid":"https://orcid.org/0000-0002-4838-9065","observed_orcids":["https://orcid.org/0000-0002-4838-9065"]},"institutions":[{"id":"https://openalex.org/I4405280948","display_name":"Zhuhai City Polytechnic","ror":"https://ror.org/03mxcdt89","country_code":"CN","type":"education","lineage":["https://openalex.org/I4405280948"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiuran Yao","raw_affiliation_strings":["Zhuhai City Polytechnic"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhuhai City Polytechnic","institution_ids":["https://openalex.org/I4405280948"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100447723","display_name":"Tingting Wang","orcid":"https://orcid.org/0000-0002-2666-7159","observed_orcids":["https://orcid.org/0000-0002-2666-7159"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tingting Wang","raw_affiliation_strings":["Zhuhai UM Science and Technology Research Institute"],"raw_orcid":"https://orcid.org/0000-0002-2666-7159","affiliations":[{"raw_affiliation_string":"Zhuhai UM Science and Technology Research Institute","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100391896","display_name":"Wei William Wang","orcid":"https://orcid.org/0000-0002-1717-5785","observed_orcids":["https://orcid.org/0000-0002-1717-5785","https://orcid.org/0000-0001-8676-1190","https://orcid.org/0000-0002-0307-0296","https://orcid.org/0000-0002-5987-738X","https://orcid.org/0000-0002-1102-1777","https://orcid.org/0000-0002-9325-3677","https://orcid.org/0000-0001-8980-2680","https://orcid.org/0000-0002-8598-0831","https://orcid.org/0000-0001-5873-2384"]},"institutions":[{"id":"https://openalex.org/I49835588","display_name":"Macao Polytechnic University","ror":"https://ror.org/02sf5td35","country_code":"MO","type":"education","lineage":["https://openalex.org/I49835588"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Wei William Wang","raw_affiliation_strings":["Macao Polytechnic University"],"raw_orcid":"https://orcid.org/0000-0002-1717-5785","affiliations":[{"raw_affiliation_string":"Macao Polytechnic University","institution_ids":["https://openalex.org/I49835588"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":{"value":2645,"currency":"USD","value_usd":2645},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"13","issue":"22","first_page":"51613","last_page":"51624"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.8140000104904175},{"id":"https://openalex.org/keywords/universal-adversarial-perturbations","display_name":"universal adversarial perturbations","score":0.9340000152587891},{"id":"https://openalex.org/keywords/iot-edge-computing","display_name":"IoT edge computing","score":0.753000020980835},{"id":"https://openalex.org/keywords/cloud-edge-collaboration","display_name":"cloud-edge collaboration","score":0.7009999752044678},{"id":"https://openalex.org/keywords/spectral-perturbation","display_name":"spectral perturbation","score":0.4959999918937683},{"id":"https://openalex.org/keywords/singular-vectors","display_name":"singular vectors","score":0.5109999775886536},{"id":"https://openalex.org/keywords/data-free-attacks","display_name":"data-free attacks","score":0.6990000009536743},{"id":"https://openalex.org/keywords/model-security","display_name":"model security","score":0.42100000381469727}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8338000178337097},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7171000242233276},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5415999889373779},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.5375999808311462},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4968999922275543},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.48989999294281006},{"id":"https://openalex.org/C138236772","wikidata":"https://www.wikidata.org/wiki/Q25098575","display_name":"Edge device","level":3,"score":0.37880000472068787},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3684999942779541},{"id":"https://openalex.org/C2778456923","wikidata":"https://www.wikidata.org/wiki/Q5337692","display_name":"Edge computing","level":3,"score":0.3564999997615814},{"id":"https://openalex.org/C3020028006","wikidata":"https://www.wikidata.org/wiki/Q9158","display_name":"Electronic mail","level":2,"score":0.28690001368522644},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.27639999985694885},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.27230000495910645},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.25369998812675476}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/jiot.2026.3723346","doi":"https://doi.org/10.1109/jiot.2026.3723346","is_oa":true,"landing_page_url":"https://doi.org/10.1109/jiot.2026.3723346","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["ccf-c","cwts-core","dongbi-b","jufo-2","norway-2","poland-200","russia-white-list-1"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/jiot.2026.3723346","doi":"https://doi.org/10.1109/jiot.2026.3723346","is_oa":true,"landing_page_url":"https://doi.org/10.1109/jiot.2026.3723346","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["ccf-c","cwts-core","dongbi-b","jufo-2","norway-2","poland-200","russia-white-list-1"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320337111","display_name":"Basic and Applied Basic Research Foundation of Guangdong Province","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W2097117768","https://openalex.org/W2108598243","https://openalex.org/W2133665775","https://openalex.org/W2194775991","https://openalex.org/W2543927648","https://openalex.org/W2605258629","https://openalex.org/W2785025328","https://openalex.org/W2809251854","https://openalex.org/W2962755172","https://openalex.org/W2962785568","https://openalex.org/W2963047332","https://openalex.org/W2963163009","https://openalex.org/W2963809642","https://openalex.org/W3005276590","https://openalex.org/W3037830434","https://openalex.org/W4206196235","https://openalex.org/W4246327874","https://openalex.org/W4320712861","https://openalex.org/W4367670059","https://openalex.org/W4378697064","https://openalex.org/W4386280880","https://openalex.org/W4386918814","https://openalex.org/W4389076731","https://openalex.org/W4390787967","https://openalex.org/W4390871960","https://openalex.org/W4402753937","https://openalex.org/W4403888359","https://openalex.org/W4404569837","https://openalex.org/W4408750153","https://openalex.org/W4409356441","https://openalex.org/W4412985123","https://openalex.org/W4414956235","https://openalex.org/W4414976291","https://openalex.org/W4415043004","https://openalex.org/W7108598167","https://openalex.org/W7123342537","https://openalex.org/W7140146914"],"related_works":["https://openalex.org/W7212411316","https://openalex.org/W7203697060","https://openalex.org/W7167589465","https://openalex.org/W4315630143","https://openalex.org/W7134167834","https://openalex.org/W4389120287","https://openalex.org/W7203683864","https://openalex.org/W7137145676","https://openalex.org/W7164363055","https://openalex.org/W4392278785"],"abstract_inverted_index":{"Split":[0],"computing":[1],"has":[2],"emerged":[3],"as":[4],"a":[5,85],"practical":[6],"architecture":[7,43],"for":[8,152,202],"deploying":[9],"deep":[10],"neural":[11],"networks":[12],"(DNNs)":[13],"in":[14,38,101],"resource-constrained":[15],"Internet":[16],"of":[17,67,96,116,190],"Things":[18],"(IoT)":[19],"systems,":[20],"where":[21],"early":[22],"network":[23],"layers":[24,32],"run":[25],"on":[26,34,159],"edge":[27,35],"devices":[28],"and":[29,46,161,176,180],"the":[30,39,52,79,93,97,102,106,117,125,134,145,169,187],"remaining":[31],"execute":[33],"servers":[36],"or":[37],"cloud.":[40],"While":[41],"this":[42,60],"improves":[44],"efficiency":[45],"reduces":[47],"latency,":[48],"it":[49,149],"also":[50],"exposes":[51],"device-side":[53],"subnetwork,":[54],"creating":[55],"potential":[56],"security":[57,200],"risks.":[58],"In":[59],"paper,":[61],"we":[62],"investigate":[63],"whether":[64],"partial":[65],"exposure":[66],"early-layer":[68],"parameters":[69],"can":[70],"be":[71],"exploited":[72],"to":[73,110],"construct":[74],"effective":[75],"adversarial":[76,88,131],"attacks":[77],"against":[78],"full":[80],"split-deployed":[81,191],"model.":[82],"We":[83],"propose":[84],"structure-aware":[86],"universal":[87],"perturbation":[89,107,122],"(SA-UAP)":[90],"that":[91,168,186],"leverages":[92],"spectral":[94,181,195],"properties":[95],"exposed":[98,188],"linear":[99],"operators":[100],"edge-side":[103],"subnetwork.":[104],"Specifically,":[105],"is":[108],"optimized":[109],"align":[111],"with":[112,144,163],"dominant":[113],"singular":[114],"directions":[115],"accessible":[118],"layers,":[119],"thereby":[120],"maximizing":[121],"amplification":[123],"through":[124],"frontend":[126],"feature":[127],"extractor.":[128],"Unlike":[129],"conventional":[130],"attack":[132,171],"methods,":[133],"proposed":[135,170],"approach":[136],"requires":[137],"neither":[138],"full-model":[139],"access":[140],"nor":[141],"repeated":[142],"interaction":[143],"cloud-side":[146],"model,":[147],"making":[148],"particularly":[150],"suitable":[151],"realistic":[153],"IoT":[154],"split-deployment":[155],"scenarios.":[156],"Extensive":[157],"experiments":[158],"CIFAR-10":[160],"ImageNet":[162],"multiple":[164],"backbone":[165],"architectures":[166],"demonstrate":[167],"significantly":[172],"degrades":[173],"classification":[174],"accuracy":[175],"outperforms":[177],"existing":[178],"data-free":[179],"baselines.":[182],"These":[183],"results":[184],"reveal":[185],"prefix":[189],"models":[192],"contains":[193],"exploitable":[194],"vulnerabilities,":[196],"highlighting":[197],"an":[198],"important":[199],"consideration":[201],"edge\u2013cloud":[203],"collaborative":[204],"intelligence.":[205]},"counts_by_year":[],"updated_date":"2026-11-08T12:12:28.789561","created_date":"2026-08-13T00:00:00"}