{"id":"https://openalex.org/W4408324398","doi":"https://doi.org/10.1109/globecom52923.2024.10901588","title":"AdvNets: Adversarial Attacks and Countermeasures for Model-level Neural Trojan Defenses","display_name":"AdvNets: Adversarial Attacks and Countermeasures for Model-level Neural Trojan Defenses","publication_year":2024,"publication_date":"2024-12-08","ids":{"openalex":"https://openalex.org/W4408324398","doi":"https://doi.org/10.1109/globecom52923.2024.10901588"},"language":"en","primary_location":{"id":"doi:10.1109/globecom52923.2024.10901588","is_oa":false,"landing_page_url":"https://doi.org/10.1109/globecom52923.2024.10901588","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"GLOBECOM 2024 - 2024 IEEE Global Communications Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5009695050","display_name":"Pengfei Sun","orcid":"https://orcid.org/0000-0001-7412-5154"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Pengfei Sun","raw_affiliation_strings":["University of Science and Technology of China,Institude of Advanced Technology,Hefei,China,230027"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Science and Technology of China,Institude of Advanced Technology,Hefei,China,230027","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100458254","display_name":"Chi Zhang","orcid":"https://orcid.org/0009-0000-8605-3848"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chi Zhang","raw_affiliation_strings":["University of Science and Technology of China,School of Cyberspace Science and Technology,Hefei,China,230027"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Science and Technology of China,School of Cyberspace Science and Technology,Hefei,China,230027","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068782320","display_name":"Lingbo Wei","orcid":"https://orcid.org/0000-0003-1222-1006"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lingbo Wei","raw_affiliation_strings":["University of Science and Technology of China,School of Cyberspace Science and Technology,Hefei,China,230027"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Science and Technology of China,School of Cyberspace Science and Technology,Hefei,China,230027","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049285935","display_name":"Bingbing Zhang","orcid":"https://orcid.org/0000-0002-0084-3206"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bingbing Zhang","raw_affiliation_strings":["University of Science and Technology of China,School of Cyberspace Science and Technology,Hefei,China,230027"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Science and Technology of China,School of Cyberspace Science and Technology,Hefei,China,230027","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102908901","display_name":"Qibin Sun","orcid":"https://orcid.org/0000-0002-6789-7460"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qibin Sun","raw_affiliation_strings":["University of Science and Technology of China,School of Cyberspace Science and Technology,Hefei,China,230027"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Science and Technology of China,School of Cyberspace Science and Technology,Hefei,China,230027","institution_ids":["https://openalex.org/I126520041"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I126520041"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"4292","last_page":"4297"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/trojan","display_name":"Trojan","score":0.9317216873168945},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7201269268989563},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6465375423431396},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6371758580207825},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.29899024963378906}],"concepts":[{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.9317216873168945},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7201269268989563},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6465375423431396},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6371758580207825},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.29899024963378906}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/globecom52923.2024.10901588","is_oa":false,"landing_page_url":"https://doi.org/10.1109/globecom52923.2024.10901588","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"GLOBECOM 2024 - 2024 IEEE Global Communications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.550000011920929,"id":"https://metadata.un.org/sdg/13","display_name":"Climate action"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W3008191164","https://openalex.org/W3012113073","https://openalex.org/W3083185154","https://openalex.org/W3096024389","https://openalex.org/W3152758407","https://openalex.org/W3178326529","https://openalex.org/W4214680449","https://openalex.org/W4402288683","https://openalex.org/W6640425456","https://openalex.org/W6739868092","https://openalex.org/W6743581629","https://openalex.org/W6746897123","https://openalex.org/W6752985256","https://openalex.org/W6754733991","https://openalex.org/W6756074407","https://openalex.org/W6759622168","https://openalex.org/W6789325072","https://openalex.org/W6802862418","https://openalex.org/W6803329306","https://openalex.org/W6851198228"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W4253721122","https://openalex.org/W1671033612","https://openalex.org/W4389527383","https://openalex.org/W4206524843","https://openalex.org/W2139923244","https://openalex.org/W2502115930","https://openalex.org/W2237899707"],"abstract_inverted_index":{"Neural":[0],"trojans":[1],"constitute":[2],"a":[3,17,61,147,152],"serious":[4],"threat":[5],"to":[6,14,71,142],"systems":[7],"that":[8,94],"employ":[9],"neural":[10],"networks.":[11],"In":[12,55],"response":[13],"this":[15,56,131],"threat,":[16],"multitude":[18],"of":[19,68,79,130],"trojan":[20,81,156],"defense":[21,157],"strategies":[22],"have":[23],"surfaced,":[24],"with":[25],"model-level":[26,38,80],"measures,":[27],"particularly":[28],"those":[29],"applied":[30],"post-training,":[31],"showcasing":[32],"broader":[33],"applicability.":[34],"However,":[35],"many":[36],"such":[37],"defenses":[39,82,99],"could":[40],"be":[41],"vulnerable":[42],"because":[43],"their":[44],"robustness":[45,78],"against":[46,83],"adaptive":[47,84],"attacks":[48],"launched":[49],"by":[50,122],"sophisticated":[51],"adversaries":[52],"is":[53],"unvalidated.":[54],"paper,":[57],"we":[58,87,111],"introduce":[59],"AdvNets,":[60],"general":[62],"framework":[63],"developed":[64],"from":[65],"the":[66,73,77,102,135],"perspective":[67],"adversarial":[69,140],"attacks,":[70],"demonstrate":[72],"vulnerability":[74],"and":[75,90,154],"enhance":[76],"attacks.":[85],"Specifically,":[86],"implement":[88],"feature-based":[89],"score-based":[91],"attack":[92],"modules":[93],"thoroughly":[95],"circumvent":[96],"multiple":[97],"state-of-the-art":[98],"without":[100],"modifying":[101],"so-called":[103],"defendable":[104],"backdoor":[105],"patterns.":[106],"To":[107],"counteract":[108],"these":[109],"vulnerabilities,":[110],"craft":[112],"an":[113],"independent":[114],"random":[115],"decision":[116],"envelopment":[117],"mechanism":[118,132],"where":[119],"detections":[120],"made":[121],"our":[123],"detectors":[124],"are":[125],"mutually":[126],"independent.":[127],"The":[128],"implementation":[129],"markedly":[133],"improves":[134],"AUC":[136],"score":[137],"for":[138,150],"detecting":[139],"models":[141],"over":[143],"80%.":[144],"This":[145],"presents":[146],"strong":[148],"argument":[149],"designing":[151],"robust":[153],"dependable":[155],"system.":[158]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}