{"id":"https://openalex.org/W4402353825","doi":"https://doi.org/10.1109/ijcnn60899.2024.10650019","title":"PRJack: Pruning-Resistant Model Hijacking Attack Against Deep Learning Models","display_name":"PRJack: Pruning-Resistant Model Hijacking Attack Against Deep Learning Models","publication_year":2024,"publication_date":"2024-06-30","ids":{"openalex":"https://openalex.org/W4402353825","doi":"https://doi.org/10.1109/ijcnn60899.2024.10650019"},"language":"en","primary_location":{"id":"doi:10.1109/ijcnn60899.2024.10650019","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/ijcnn60899.2024.10650019","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5050802541","display_name":"Ge Han","orcid":"https://orcid.org/0000-0001-9163-8488"},"institutions":[{"id":"https://openalex.org/I80143920","display_name":"Shandong University of Science and Technology","ror":"https://ror.org/04gtjhw98","country_code":"CN","type":"education","lineage":["https://openalex.org/I80143920"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ge Han","raw_affiliation_strings":["School of Computer Science and Technology Shandong University,Qingdao,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology Shandong University,Qingdao,China","institution_ids":["https://openalex.org/I80143920"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100414996","display_name":"Zheng Li","orcid":"https://orcid.org/0000-0002-3938-7033"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Zheng Li","raw_affiliation_strings":["Helmholtz Center for Information Security (CISPA),Saarbrücken,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Helmholtz Center for Information Security (CISPA),Saarbrücken,Germany","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5084460856","display_name":"Shanqing Guo","orcid":"https://orcid.org/0000-0003-3367-0951"},"institutions":[{"id":"https://openalex.org/I80143920","display_name":"Shandong University of Science and Technology","ror":"https://ror.org/04gtjhw98","country_code":"CN","type":"education","lineage":["https://openalex.org/I80143920"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shanqing Guo","raw_affiliation_strings":["School of Cyber Science and Technology Shandong University,Qingdao,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology Shandong University,Qingdao,China","institution_ids":["https://openalex.org/I80143920"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.984000027179718,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9740999937057495,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7452982664108276},{"id":"https://openalex.org/keywords/pruning","display_name":"Pruning","score":0.719281792640686},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6054350137710571},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5573776364326477},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4335970878601074},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.425048828125},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.07496318221092224},{"id":"https://openalex.org/keywords/biology","display_name":"Biology","score":0.05885887145996094}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7452982664108276},{"id":"https://openalex.org/C108010975","wikidata":"https://www.wikidata.org/wiki/Q500094","display_name":"Pruning","level":2,"score":0.719281792640686},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6054350137710571},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5573776364326477},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4335970878601074},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.425048828125},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.07496318221092224},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.05885887145996094},{"id":"https://openalex.org/C6557445","wikidata":"https://www.wikidata.org/wiki/Q173113","display_name":"Agronomy","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ijcnn60899.2024.10650019","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/ijcnn60899.2024.10650019","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Gender equality","id":"https://metadata.un.org/sdg/5","score":0.7099999785423279}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W569478347","https://openalex.org/W2001610032","https://openalex.org/W2067713319","https://openalex.org/W2092443213","https://openalex.org/W2112796928","https://openalex.org/W2194775991","https://openalex.org/W2549139847","https://openalex.org/W2604319603","https://openalex.org/W2764043458","https://openalex.org/W2886851211","https://openalex.org/W2902931196","https://openalex.org/W2921624216","https://openalex.org/W2934843808","https://openalex.org/W2947963429","https://openalex.org/W2962851801","https://openalex.org/W2963446712","https://openalex.org/W2965862774","https://openalex.org/W2997768846","https://openalex.org/W3016493309","https://openalex.org/W3043638540","https://openalex.org/W3118608800","https://openalex.org/W3188079459","https://openalex.org/W3208785972","https://openalex.org/W3209100754","https://openalex.org/W3213814821","https://openalex.org/W4304945145","https://openalex.org/W4378834367","https://openalex.org/W4384009684","https://openalex.org/W4387122781","https://openalex.org/W4401726555","https://openalex.org/W6726275242","https://openalex.org/W6745148473","https://openalex.org/W6763835125","https://openalex.org/W6787972765","https://openalex.org/W6810027437","https://openalex.org/W6847451094","https://openalex.org/W6852705610"],"related_works":["https://openalex.org/W2731899572","https://openalex.org/W2961085424","https://openalex.org/W3215138031","https://openalex.org/W4306674287","https://openalex.org/W3009238340","https://openalex.org/W4321369474","https://openalex.org/W4360585206","https://openalex.org/W4285208911","https://openalex.org/W3046775127","https://openalex.org/W3082895349"],"abstract_inverted_index":{"Deep":[0],"learning":[1],"models,":[2],"pivotal":[3],"in":[4],"AI":[5],"applications,":[6],"are":[7,56],"susceptible":[8],"to":[9,93],"model":[10,14,72,92,110,129],"hijacking":[11,15,85,96,130],"attacks.":[12,75,131],"In":[13,76],"attacks,":[16,69],"adversaries":[17],"can":[18,104],"misuse":[19],"models":[20,38,48,126],"for":[21,67],"unintended":[22],"tasks,":[23],"shifting":[24],"blame":[25],"and":[26,51,117],"maintenance":[27],"costs":[28],"onto":[29],"the":[30,82,88,100],"models\u2019":[31],"deployers.":[32],"Existing":[33],"attack":[34],"methods":[35],"re-purpose":[36],"target":[37],"by":[39],"poisoning":[40],"their":[41],"training":[42],"sets":[43],"during":[44],"training.":[45],"However,":[46],"leading":[47],"like":[49],"GPT-4":[50],"BERT":[52],"with":[53],"vast":[54],"parameters":[55],"often":[57],"pruned":[58,125],"before":[59],"deployment":[60],"on":[61,124],"resource-limited":[62],"devices,":[63],"which":[64,103],"presents":[65],"challenges":[66],"in-training":[68],"including":[70],"existing":[71,128],"hi-":[73],"jacking":[74],"this":[77],"paper,":[78],"we":[79],"propose":[80],"PRJack,":[81],"first":[83],"pruning-resistant":[84],"attack.":[86],"Specifically,":[87],"adversary":[89],"re-purposes":[90],"a":[91,95],"perform":[94],"task":[97],"different":[98],"from":[99],"original":[101],"task,":[102],"still":[105],"be":[106],"activated":[107],"even":[108],"after":[109],"pruning.":[111],"Our":[112],"experiments":[113],"across":[114],"multiple":[115],"datasets":[116],"pruning":[118],"techniques":[119],"highlight":[120],"PRJack\u2019s":[121],"remarkable":[122],"superiority":[123],"over":[127]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}