{"id":"https://openalex.org/W3119514398","doi":"https://doi.org/10.1109/cdc42340.2020.9303949","title":"Feedback-Control Based Adversarial Attacks on Recurrent Neural Networks","display_name":"Feedback-Control Based Adversarial Attacks on Recurrent Neural Networks","publication_year":2020,"publication_date":"2020-12-14","ids":{"openalex":"https://openalex.org/W3119514398","doi":"https://doi.org/10.1109/cdc42340.2020.9303949","mag":"3119514398"},"language":"en","primary_location":{"id":"doi:10.1109/cdc42340.2020.9303949","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cdc42340.2020.9303949","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 59th IEEE Conference on Decision and Control (CDC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5031110203","display_name":"Shankar A. Deka","orcid":"https://orcid.org/0000-0003-0416-3846"},"institutions":[{"id":"https://openalex.org/I95457486","display_name":"University of California, Berkeley","ror":"https://ror.org/01an7q238","country_code":"US","type":"education","lineage":["https://openalex.org/I95457486"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shankar A. Deka","raw_affiliation_strings":["University of California Berkeley,Department of Electrical Engineering and Computer Sciences,Berkeley,CA,USA,94720"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California Berkeley,Department of Electrical Engineering and Computer Sciences,Berkeley,CA,USA,94720","institution_ids":["https://openalex.org/I95457486"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046079000","display_name":"Du\u0161an M. Stipanovi\u0107","orcid":"https://orcid.org/0000-0002-2826-5241"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dusan M. Stipanovic","raw_affiliation_strings":["University of Illinos at Urbana-Champaign,Coordinated Science Laboratory,Urbana,IL,USA,61801"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Illinos at Urbana-Champaign,Coordinated Science Laboratory,Urbana,IL,USA,61801","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5045155646","display_name":"Claire J. Tomlin","orcid":"https://orcid.org/0000-0003-3192-3185"},"institutions":[{"id":"https://openalex.org/I95457486","display_name":"University of California, Berkeley","ror":"https://ror.org/01an7q238","country_code":"US","type":"education","lineage":["https://openalex.org/I95457486"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Claire J. Tomlin","raw_affiliation_strings":["University of California Berkeley,Department of Electrical Engineering and Computer Sciences,Berkeley,CA,USA,94720"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California Berkeley,Department of Electrical Engineering and Computer Sciences,Berkeley,CA,USA,94720","institution_ids":["https://openalex.org/I95457486"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.18963085,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"3","issue":null,"first_page":"4677","last_page":"4682"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10502","display_name":"Advanced Memory and Neural Computing","score":0.9657999873161316,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9093000292778015,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9140809774398804},{"id":"https://openalex.org/keywords/robustification","display_name":"Robustification","score":0.8766822218894958},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7626724243164062},{"id":"https://openalex.org/keywords/recurrent-neural-network","display_name":"Recurrent neural network","score":0.7001551389694214},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"Adversarial machine learning","score":0.6200679540634155},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5802254676818848},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5473341345787048},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.5321632623672485},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.47762149572372437},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.41271692514419556}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9140809774398804},{"id":"https://openalex.org/C2778584072","wikidata":"https://www.wikidata.org/wiki/Q7353545","display_name":"Robustification","level":3,"score":0.8766822218894958},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7626724243164062},{"id":"https://openalex.org/C147168706","wikidata":"https://www.wikidata.org/wiki/Q1457734","display_name":"Recurrent neural network","level":3,"score":0.7001551389694214},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.6200679540634155},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5802254676818848},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5473341345787048},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.5321632623672485},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.47762149572372437},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.41271692514419556},{"id":"https://openalex.org/C79337645","wikidata":"https://www.wikidata.org/wiki/Q779824","display_name":"Outlier","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cdc42340.2020.9303949","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cdc42340.2020.9303949","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 59th IEEE Conference on Decision and Control (CDC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W1945616565","https://openalex.org/W2180612164","https://openalex.org/W2460937040","https://openalex.org/W2547418827","https://openalex.org/W2561498661","https://openalex.org/W2603766943","https://openalex.org/W2943801311","https://openalex.org/W2951305674","https://openalex.org/W2962700793","https://openalex.org/W2963070423","https://openalex.org/W2963207607","https://openalex.org/W2963834268","https://openalex.org/W2963857521","https://openalex.org/W2964153729","https://openalex.org/W3083580741","https://openalex.org/W3136937816","https://openalex.org/W4287671495","https://openalex.org/W4300511536","https://openalex.org/W4302585512","https://openalex.org/W6637162671","https://openalex.org/W6640425456","https://openalex.org/W6719080892","https://openalex.org/W6729216784","https://openalex.org/W6731039222","https://openalex.org/W6746608116","https://openalex.org/W6762082407","https://openalex.org/W6782886638"],"related_works":["https://openalex.org/W3048732067","https://openalex.org/W4383468834","https://openalex.org/W2900159906","https://openalex.org/W4384648009","https://openalex.org/W4283221438","https://openalex.org/W4287828318","https://openalex.org/W2406556600","https://openalex.org/W4380352238","https://openalex.org/W2950183588","https://openalex.org/W4293054861"],"abstract_inverted_index":{"Crafting":[0],"adversarial":[1,47,76],"inputs":[2],"for":[3],"attacks":[4,12,48],"on":[5,46,49,82],"neural":[6,51,87],"networks":[7,52],"and":[8,79],"robustification":[9],"against":[10],"such":[11],"have":[13],"continued":[14],"to":[15,73,113,120],"be":[16,71],"a":[17,43],"topic":[18],"of":[19,31,57,101,105],"keen":[20],"interest":[21],"in":[22,33,39],"the":[23,28,55,86,102,124],"machine":[24],"learning":[25],"community.":[26],"Yet,":[27],"vast":[29],"majority":[30],"work":[32],"current":[34],"literature":[35],"is":[36],"only":[37],"empirical":[38],"nature.":[40],"We":[41],"present":[42],"novel":[44],"viewpoint":[45],"recurrent":[50,103],"(RNNs)":[53],"through":[54],"lens":[56],"dynamical":[58],"systems":[59],"theory.":[60],"In":[61],"particular,":[62],"we":[63],"show":[64],"how":[65,83],"control":[66],"theory-based":[67],"analysis":[68],"tools":[69],"can":[70],"leveraged":[72],"compute":[74],"these":[75],"input":[77],"disturbances,":[78],"obtain":[80],"bounds":[81],"they":[84],"impact":[85],"network":[88],"performance.":[89],"The":[90],"disturbances":[91],"are":[92,127],"computed":[93],"dynamically":[94],"at":[95],"each":[96],"time-step":[97],"by":[98,129],"taking":[99],"advantage":[100],"architecture":[104],"RNNs,":[106],"thus":[107],"making":[108],"them":[109],"more":[110],"efficient":[111],"compared":[112],"prior":[114],"work,":[115],"as":[116,118],"well":[117],"amenable":[119],"`real-time'":[121],"attacks.":[122],"Finally,":[123],"theoretical":[125],"results":[126],"supported":[128],"some":[130],"illustrative":[131],"examples.":[132]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}