{"id":"https://openalex.org/W3197655726","doi":"https://doi.org/10.1109/bigdata52589.2021.9671964","title":"A Synergetic Attack against Neural Network Classifiers combining Backdoor and Adversarial Examples","display_name":"A Synergetic Attack against Neural Network Classifiers combining Backdoor and Adversarial Examples","publication_year":2021,"publication_date":"2021-12-15","ids":{"openalex":"https://openalex.org/W3197655726","doi":"https://doi.org/10.1109/bigdata52589.2021.9671964","mag":"3197655726"},"language":"en","primary_location":{"id":"doi:10.1109/bigdata52589.2021.9671964","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata52589.2021.9671964","pdf_url":null,"source":{"id":"https://openalex.org/S4363607718","display_name":"2021 IEEE International Conference on Big Data (Big Data)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5001112865","display_name":"Guanxiong Liu","orcid":"https://orcid.org/0000-0001-7620-5836"},"institutions":[{"id":"https://openalex.org/I118118575","display_name":"New Jersey Institute of Technology","ror":"https://ror.org/05e74xb87","country_code":"US","type":"education","lineage":["https://openalex.org/I118118575"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Guanxiong Liu","raw_affiliation_strings":["New Jersey Institute of Technology, Newark, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New Jersey Institute of Technology, Newark, USA","institution_ids":["https://openalex.org/I118118575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008374141","display_name":"Issa Khalil","orcid":"https://orcid.org/0000-0002-7660-9512"},"institutions":[{"id":"https://openalex.org/I1301390666","display_name":"Qatar Airways (Qatar)","ror":"https://ror.org/01hx00y13","country_code":"QA","type":"company","lineage":["https://openalex.org/I1301390666"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Issa Khalil","raw_affiliation_strings":["Qatar Computing Research Institute, Doha, Qatar"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Qatar Computing Research Institute, Doha, Qatar","institution_ids":["https://openalex.org/I1301390666"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062119199","display_name":"Abdallah Khreishah","orcid":"https://orcid.org/0000-0003-1583-713X"},"institutions":[{"id":"https://openalex.org/I118118575","display_name":"New Jersey Institute of Technology","ror":"https://ror.org/05e74xb87","country_code":"US","type":"education","lineage":["https://openalex.org/I118118575"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Abdallah Khreishah","raw_affiliation_strings":["New Jersey Institute of Technology, Newark, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New Jersey Institute of Technology, Newark, USA","institution_ids":["https://openalex.org/I118118575"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5060481572","display_name":"NhatHai Phan","orcid":"https://orcid.org/0000-0002-1032-8275"},"institutions":[{"id":"https://openalex.org/I118118575","display_name":"New Jersey Institute of Technology","ror":"https://ror.org/05e74xb87","country_code":"US","type":"education","lineage":["https://openalex.org/I118118575"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"NhatHai Phan","raw_affiliation_strings":["New Jersey Institute of Technology, Newark, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New Jersey Institute of Technology, Newark, USA","institution_ids":["https://openalex.org/I118118575"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"834","last_page":"846"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9516000151634216,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.9099000096321106,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9740962386131287},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.864725649356842},{"id":"https://openalex.org/keywords/trojan","display_name":"Trojan","score":0.7943297624588013},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.7429063320159912},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7413029074668884},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7069966793060303},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6041347980499268},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.567204475402832},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.5612385272979736},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"Adversarial machine learning","score":0.547099232673645},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.5457680225372314},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5353171825408936},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5334736704826355},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.47734931111335754},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.41830700635910034}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9740962386131287},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.864725649356842},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.7943297624588013},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.7429063320159912},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7413029074668884},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7069966793060303},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6041347980499268},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.567204475402832},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5612385272979736},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.547099232673645},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.5457680225372314},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5353171825408936},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5334736704826355},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.47734931111335754},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.41830700635910034},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/bigdata52589.2021.9671964","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata52589.2021.9671964","pdf_url":null,"source":{"id":"https://openalex.org/S4363607718","display_name":"2021 IEEE International Conference on Big Data (Big Data)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.8100000023841858}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":55,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W1945616565","https://openalex.org/W2112796928","https://openalex.org/W2125389028","https://openalex.org/W2194775991","https://openalex.org/W2274565976","https://openalex.org/W2541884796","https://openalex.org/W2748789698","https://openalex.org/W2752689052","https://openalex.org/W2753783305","https://openalex.org/W2787708942","https://openalex.org/W2810065831","https://openalex.org/W2889233174","https://openalex.org/W2894012075","https://openalex.org/W2897865027","https://openalex.org/W2914712270","https://openalex.org/W2934843808","https://openalex.org/W2963143631","https://openalex.org/W2963207607","https://openalex.org/W2963389226","https://openalex.org/W2963597678","https://openalex.org/W2963744840","https://openalex.org/W2963952467","https://openalex.org/W2964082701","https://openalex.org/W2964153729","https://openalex.org/W2964253222","https://openalex.org/W2969215546","https://openalex.org/W2970115835","https://openalex.org/W2971661634","https://openalex.org/W2986013765","https://openalex.org/W2989696285","https://openalex.org/W2990270730","https://openalex.org/W2995164118","https://openalex.org/W3024103409","https://openalex.org/W3034936311","https://openalex.org/W3037024761","https://openalex.org/W3096264229","https://openalex.org/W3104813328","https://openalex.org/W3115279145","https://openalex.org/W4288359148","https://openalex.org/W4293846201","https://openalex.org/W4318619660","https://openalex.org/W6637162671","https://openalex.org/W6640425456","https://openalex.org/W6694611762","https://openalex.org/W6728757088","https://openalex.org/W6729756640","https://openalex.org/W6743821447","https://openalex.org/W6743986261","https://openalex.org/W6752600739","https://openalex.org/W6761839128","https://openalex.org/W6769353967","https://openalex.org/W6771533808","https://openalex.org/W6779439017","https://openalex.org/W6785996230"],"related_works":["https://openalex.org/W3127616799","https://openalex.org/W4225614914","https://openalex.org/W4297632144","https://openalex.org/W3106646114","https://openalex.org/W4308244459","https://openalex.org/W4200628936","https://openalex.org/W4221166349","https://openalex.org/W4226092343","https://openalex.org/W4225678119","https://openalex.org/W2969023901"],"abstract_inverted_index":{"The":[0,40,215],"pervasiveness":[1],"of":[2,24,32,37,43,64,92,190,218,278],"neural":[3],"networks":[4],"(NNs)":[5],"in":[6,112,197,276],"critical":[7],"computer":[8],"vision":[9],"and":[10,94,125,142,179,255,282],"image":[11],"processing":[12],"applications":[13,91],"makes":[14],"them":[15],"very":[16],"attractive":[17],"for":[18],"adversarial":[19,140,169,195,234],"manipulation.":[20],"A":[21],"large":[22],"body":[23],"existing":[25,130,267],"research":[26],"thoroughly":[27],"investigates":[28],"two":[29],"broad":[30],"categories":[31],"attacks":[33,84,121],"targeting":[34],"the":[35,50,61,70,73,89,174,187,191,198,206,221,226,243],"integrity":[36],"NN":[38],"models.":[39],"first":[41],"category":[42,63],"attacks,":[44,65],"commonly":[45],"called":[46],"Adversarial":[47],"Examples,":[48],"perturbs":[49],"model\u2019s":[51],"inference":[52],"by":[53,76,240],"carefully":[54,167],"adding":[55],"noise":[56,196],"into":[57,173,223],"input":[58,175,199],"examples.":[59,235],"In":[60],"second":[62],"adversaries":[66],"try":[67],"to":[68,88,122,137,146,201,213,247,274,286],"manipulate":[69],"model":[71,143,207,228],"during":[72,177,186],"training":[74,188,244],"process":[75,189],"implanting":[77],"Trojan":[78,182,249],"backdoors.":[79],"Researchers":[80],"show":[81,135,262],"that":[82,263],"such":[83,104],"pose":[85],"severe":[86],"threats":[87],"growing":[90],"NNs":[93],"propose":[95],"several":[96,259],"defenses":[97,268],"against":[98,233],"each":[99],"attack":[100,287],"type":[101],"individually.":[102],"However,":[103],"one-sided":[105],"defense":[106],"approaches":[107],"leave":[108],"potentially":[109],"unknown":[110],"risks":[111],"real-world":[113],"scenarios":[114,281],"when":[115],"an":[116],"adversary":[117],"can":[118,160,237,265,283],"unify":[119],"different":[120],"create":[123],"new":[124,150],"more":[126],"lethal":[127],"ones":[128],"bypassing":[129],"defenses.In":[131],"this":[132],"work,":[133],"we":[134],"how":[136],"jointly":[138],"exploit":[139],"perturbation":[141,170],"poisoning":[144,242],"vulnerabilities":[145],"practically":[147],"launch":[148],"a":[149,166,181,230,270],"stealthy":[151,157],"attack,":[152],"dubbed":[153],"AdvTrojan.":[154],"AdvTrojan":[155,219,236,264],"is":[156,171,184],"because":[158],"it":[159,211],"be":[161,238,284],"activated":[162],"only":[163,241],"when:":[164],"1)":[165],"crafted":[168],"injected":[172],"examples":[176,204],"inference,":[178],"2)":[180],"backdoor":[183,250],"implanted":[185],"model.":[192],"We":[193],"leverage":[194],"space":[200],"move":[202],"Trojan-infected":[203],"across":[205],"decision":[208],"boundary,":[209],"making":[210],"difficult":[212],"detect.":[214],"stealthiness":[216],"behavior":[217],"fools":[220],"users":[222],"accidentally":[224],"trusting":[225],"infected":[227],"as":[229,290,292],"robust":[231],"classifier":[232],"implemented":[239],"data":[245],"similar":[246],"conventional":[248],"attacks.":[251],"Our":[252],"thorough":[253],"analysis":[254],"extensive":[256],"experiments":[257],"on":[258],"benchmark":[260],"datasets":[261],"bypass":[266],"with":[269],"success":[271],"rate":[272],"close":[273],"100%":[275],"most":[277],"our":[279],"experimental":[280],"extended":[285],"federated":[288],"learning":[289],"well":[291],"high-resolution":[293],"images.":[294]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":4},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}