{"id":"https://openalex.org/W4312466566","doi":"https://doi.org/10.1109/ijcnn55064.2022.9892842","title":"Latent Space-Based Backdoor Attacks Against Deep Neural Networks","display_name":"Latent Space-Based Backdoor Attacks Against Deep Neural Networks","publication_year":2022,"publication_date":"2022-07-18","ids":{"openalex":"https://openalex.org/W4312466566","doi":"https://doi.org/10.1109/ijcnn55064.2022.9892842"},"language":"en","primary_location":{"id":"doi:10.1109/ijcnn55064.2022.9892842","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn55064.2022.9892842","pdf_url":null,"source":{"id":"https://openalex.org/S4363607707","display_name":"2022 International Joint Conference on Neural Networks (IJCNN)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045458825","display_name":"Adrian Kristanto","orcid":null},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Adrian Kristanto","raw_affiliation_strings":["Monash University,Australia","Monash University, Australia"],"affiliations":[{"raw_affiliation_string":"Monash University,Australia","institution_ids":["https://openalex.org/I56590836"]},{"raw_affiliation_string":"Monash University, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100400133","display_name":"Shuo Wang","orcid":"https://orcid.org/0000-0001-8938-2364"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"funder","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shuo Wang","raw_affiliation_strings":["CSIRO's Data61 & Cybersecurity CRC,Australia"],"affiliations":[{"raw_affiliation_string":"CSIRO's Data61 & Cybersecurity CRC,Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5086593836","display_name":"Carsten Rudolph","orcid":"https://orcid.org/0000-0001-9050-5675"},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Carsten Rudolph","raw_affiliation_strings":["Monash University,Melbourne,Australia","Monash University, Melbourne, Australia"],"affiliations":[{"raw_affiliation_string":"Monash University,Melbourne,Australia","institution_ids":["https://openalex.org/I56590836"]},{"raw_affiliation_string":"Monash University, Melbourne, Australia","institution_ids":["https://openalex.org/I56590836"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5045458825"],"corresponding_institution_ids":["https://openalex.org/I56590836"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.14840552,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"35","issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9916999936103821,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9878000020980835,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9993495345115662},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6881346702575684},{"id":"https://openalex.org/keywords/mnist-database","display_name":"MNIST database","score":0.6853093504905701},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5961496233940125},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5766825675964355},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5629703998565674},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5142449736595154},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4783351421356201},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2326706051826477}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9993495345115662},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6881346702575684},{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.6853093504905701},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5961496233940125},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5766825675964355},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5629703998565674},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5142449736595154},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4783351421356201},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2326706051826477}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ijcnn55064.2022.9892842","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn55064.2022.9892842","pdf_url":null,"source":{"id":"https://openalex.org/S4363607707","display_name":"2022 International Joint Conference on Neural Networks (IJCNN)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.47999998927116394,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":62,"referenced_works":["https://openalex.org/W1686810756","https://openalex.org/W1782590233","https://openalex.org/W1945616565","https://openalex.org/W1959608418","https://openalex.org/W2096733369","https://openalex.org/W2097117768","https://openalex.org/W2112507308","https://openalex.org/W2112796928","https://openalex.org/W2117539524","https://openalex.org/W2117876524","https://openalex.org/W2125085157","https://openalex.org/W2125389028","https://openalex.org/W2163922914","https://openalex.org/W2194775991","https://openalex.org/W2243397390","https://openalex.org/W2257979135","https://openalex.org/W2325939864","https://openalex.org/W2476429474","https://openalex.org/W2543927648","https://openalex.org/W2570685808","https://openalex.org/W2591602089","https://openalex.org/W2606462007","https://openalex.org/W2618530766","https://openalex.org/W2752796333","https://openalex.org/W2753783305","https://openalex.org/W2774423163","https://openalex.org/W2775907600","https://openalex.org/W2785519580","https://openalex.org/W2798626461","https://openalex.org/W2942091739","https://openalex.org/W2962770929","https://openalex.org/W2962851944","https://openalex.org/W2963226019","https://openalex.org/W2963684088","https://openalex.org/W2963749936","https://openalex.org/W2963799213","https://openalex.org/W2971074500","https://openalex.org/W2985913519","https://openalex.org/W2988471847","https://openalex.org/W2996800219","https://openalex.org/W2999151098","https://openalex.org/W3012113073","https://openalex.org/W3015678314","https://openalex.org/W3034414373","https://openalex.org/W3035574324","https://openalex.org/W3083185154","https://openalex.org/W3094954720","https://openalex.org/W3101609372","https://openalex.org/W3118608800","https://openalex.org/W4214818157","https://openalex.org/W4252979261","https://openalex.org/W4287998266","https://openalex.org/W4288322578","https://openalex.org/W4294170691","https://openalex.org/W4294643831","https://openalex.org/W4295312788","https://openalex.org/W4295521014","https://openalex.org/W4299518610","https://openalex.org/W4320013936","https://openalex.org/W6682691769","https://openalex.org/W6735913928","https://openalex.org/W6766978945"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4386080799","https://openalex.org/W3093748630","https://openalex.org/W3206218040","https://openalex.org/W4206776436"],"abstract_inverted_index":{"The":[0,91],"outstanding":[1],"performance":[2],"of":[3,46,93,130,139,146],"modern":[4],"deep":[5,79,132],"learning":[6],"systems":[7,28],"resulted":[8],"in":[9,13,87],"their":[10],"widespread":[11],"adoption":[12],"various":[14],"application":[15],"domains,":[16],"which":[17,56,109],"include":[18],"security-critical":[19],"applications.":[20],"However,":[21],"recent":[22],"works":[23],"have":[24],"shown":[25],"that":[26],"these":[27],"are":[29,110],"vulnerable":[30],"to":[31,40,82,119,136],"backdoor":[32,43,51,74,85,154],"attacks.":[33,44,155],"This":[34,115],"paper":[35,64],"proposed":[36,95],"a":[37,121],"novel":[38],"approach":[39],"perform":[41],"latent":[42,69,89],"Instead":[45],"designing":[47],"the":[48,53,66,84,88,94,127,131,137],"exogenetic":[49,149],"trigger":[50,75,86],"on":[52,99,105],"pixel":[54],"space,":[55],"has":[57],"been":[58],"done":[59],"by":[60,77],"existing":[61,153],"works,":[62],"this":[63],"explored":[65],"connection":[67],"between":[68],"space":[70],"manipulation":[71],"and":[72,113,142],"endogenic":[73,128],"generation":[76],"utilising":[78],"generative":[80],"models":[81],"generate":[83],"space.":[90],"effectiveness":[92],"attack":[96],"is":[97,117],"demonstrated":[98],"several":[100],"neural":[101,133],"network":[102],"architectures":[103],"trained":[104],"three":[106],"well-known":[107],"datasets,":[108],"MNIST,":[111],"CIFAR-10":[112],"GTSRB.":[114],"study":[116],"undertaken":[118],"provide":[120],"new":[122,148],"viewpoint":[123],"for":[124,152],"better":[125],"understanding":[126],"vulnerability":[129],"networks":[134],"due":[135],"lack":[138],"training":[140],"data":[141],"test":[143],"data,":[144],"instead":[145],"creating":[147],"misclassification":[150],"behaviours":[151]},"counts_by_year":[],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}