{"id":"https://openalex.org/W4377969866","doi":"https://doi.org/10.1109/isqed57927.2023.10129311","title":"SpotOn: A Gradient-based Targeted Data Poisoning Attack on Deep Neural Networks","display_name":"SpotOn: A Gradient-based Targeted Data Poisoning Attack on Deep Neural Networks","publication_year":2023,"publication_date":"2023-04-05","ids":{"openalex":"https://openalex.org/W4377969866","doi":"https://doi.org/10.1109/isqed57927.2023.10129311"},"language":"en","primary_location":{"id":"doi:10.1109/isqed57927.2023.10129311","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isqed57927.2023.10129311","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 24th International Symposium on Quality Electronic Design (ISQED)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5018591362","display_name":"Yash Khare","orcid":null},"institutions":[{"id":"https://openalex.org/I81556334","display_name":"Amrita Vishwa Vidyapeetham","ror":"https://ror.org/03am10p12","country_code":"IN","type":"education","lineage":["https://openalex.org/I81556334"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Yash Khare","raw_affiliation_strings":["Amrita Vishwa Vidyapeetham"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Amrita Vishwa Vidyapeetham","institution_ids":["https://openalex.org/I81556334"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067855649","display_name":"Kumud Lakara","orcid":null},"institutions":[{"id":"https://openalex.org/I164861460","display_name":"Manipal Academy of Higher Education","ror":"https://ror.org/02xzytt36","country_code":"IN","type":"education","lineage":["https://openalex.org/I164861460"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Kumud Lakara","raw_affiliation_strings":["Manipal Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Manipal Institute of Technology","institution_ids":["https://openalex.org/I164861460"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012290807","display_name":"Sparsh Mittal","orcid":"https://orcid.org/0000-0002-2908-993X"},"institutions":[{"id":"https://openalex.org/I154851008","display_name":"Indian Institute of Technology Roorkee","ror":"https://ror.org/00582g326","country_code":"IN","type":"education","lineage":["https://openalex.org/I154851008"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Sparsh Mittal","raw_affiliation_strings":["Indian Institute of Technology (IIT) Roorkee"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indian Institute of Technology (IIT) Roorkee","institution_ids":["https://openalex.org/I154851008"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049793325","display_name":"Arvind Kaushik","orcid":null},"institutions":[{"id":"https://openalex.org/I4210123704","display_name":"NXP (Germany)","ror":"https://ror.org/0268h4j55","country_code":"DE","type":"company","lineage":["https://openalex.org/I109147379","https://openalex.org/I4210123704"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Arvind Kaushik","raw_affiliation_strings":["NXP Semiconductors"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NXP Semiconductors","institution_ids":["https://openalex.org/I4210123704"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5086400313","display_name":"Rekha Singhal","orcid":"https://orcid.org/0000-0002-3712-1784"},"institutions":[{"id":"https://openalex.org/I55215948","display_name":"Tata Consultancy Services (India)","ror":"https://ror.org/01b9n8m42","country_code":"IN","type":"company","lineage":["https://openalex.org/I4210086519","https://openalex.org/I55215948"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Rekha Singhal","raw_affiliation_strings":["TCS Research,India","TCS Research, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"TCS Research,India","institution_ids":["https://openalex.org/I55215948"]},{"raw_affiliation_string":"TCS Research, India","institution_ids":["https://openalex.org/I55215948"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.6534,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.66277447,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9714999794960022,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9679999947547913,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6887561082839966},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.6510353088378906},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.4961338937282562},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4818331301212311},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4531432092189789}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6887561082839966},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.6510353088378906},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.4961338937282562},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4818331301212311},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4531432092189789}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/isqed57927.2023.10129311","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isqed57927.2023.10129311","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 24th International Symposium on Quality Electronic Design (ISQED)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306087","display_name":"Semiconductor Research Corporation","ror":"https://ror.org/047z4n946"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W1945616565","https://openalex.org/W2133665775","https://openalex.org/W2243397390","https://openalex.org/W2295107390","https://openalex.org/W2408141691","https://openalex.org/W2543927648","https://openalex.org/W2603766943","https://openalex.org/W2604505099","https://openalex.org/W2727966874","https://openalex.org/W2745565856","https://openalex.org/W2746600820","https://openalex.org/W2765424254","https://openalex.org/W2774644650","https://openalex.org/W2883285025","https://openalex.org/W2953073956","https://openalex.org/W2962847335","https://openalex.org/W2962858109","https://openalex.org/W2963389226","https://openalex.org/W2963857521","https://openalex.org/W2964205597","https://openalex.org/W2964346747","https://openalex.org/W3095428824","https://openalex.org/W3096281486","https://openalex.org/W3103557498","https://openalex.org/W3106412272","https://openalex.org/W3177466356","https://openalex.org/W4289305644","https://openalex.org/W4293529028","https://openalex.org/W4293846201","https://openalex.org/W6751758391"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052","https://openalex.org/W4402327032","https://openalex.org/W2382290278"],"abstract_inverted_index":{"Deep":[0],"neural":[1],"networks":[2],"(DNNs)":[3],"are":[4,10],"vulnerable":[5],"to":[6,16,40,76,118,130,138,165,169,196],"adversarial":[7,22,62,69,81],"inputs,":[8],"which":[9,74],"created":[11],"by":[12,175],"adding":[13],"minor":[14],"perturbations":[15],"the":[17,26,42,60,78,105,108,119,131,189,192],"genuine":[18],"inputs.":[19],"Previous":[20],"gradient-based":[21,68],"attacks,":[23],"such":[24,52],"as":[25],"\"fast":[27],"gradient":[28],"sign":[29],"method\"":[30],"(FGSM),":[31],"add":[32],"an":[33,45,87,112,170,180,200,208],"equal":[34],"amount":[35,115,125],"(say":[36,128],"\u03f5)":[37],"of":[38,44,80,90,101,116,126,173,188,203],"noise":[39,117,127],"all":[41,177],"pixels":[43,178,190],"image.":[46,133,181],"This":[47,205],"degrades":[48,160,194],"image":[49,151],"quality":[50,79],"significantly,":[51],"that":[53],"a":[54,66,122],"human":[55],"validator":[56],"can":[57],"easily":[58],"detect":[59],"resultant":[61],"samples.":[63],"We":[64,84],"propose":[65],"novel":[67],"attack":[70,103,211],"technique":[71],"named":[72],"SpotOn,":[73],"seeks":[75],"maintain":[77],"images":[82],"high.":[83],"first":[85],"identify":[86],"image\u2019s":[88],"region":[89],"importance":[91],"(ROI)":[92],"using":[93],"Grad-CAM.":[94],"SpotOn":[95,102,140,207],"has":[96],"three":[97],"variants.":[98],"Two":[99],"variants":[100],"only":[104,186],"ROI,":[106],"whereas":[107],"third":[109],"variant":[110],"adds":[111],"epsilon":[113],"(\u03f5)":[114],"ROI":[120],"and":[121,167,198],"much":[123,149],"smaller":[124],"\u03f5/3)":[129],"remaining":[132],"On":[134],"Caltech101":[135],"dataset,":[136],"compared":[137],"FGSM,":[139],"achieves":[141],"comparable":[142],"degradation":[143],"in":[144,179,191],"CNN":[145],"accuracy":[146,162,195],"while":[147],"maintaining":[148],"higher":[150],"quality.":[152],"For":[153],"example,":[154],"for":[155],"\u03f5":[156],"=":[157],"0.1,":[158],"FGSM":[159],"VGG19":[161],"from":[163,217],"92%":[164],"8%":[166],"leads":[168],"SSIM":[171,201],"value":[172,202],"0.48":[174],"attacking":[176],"By":[182],"contrast,":[183],"SpotOn-VariableNoise":[184],"attacks":[185],"34.8%":[187],"image;":[193],"10.5%":[197],"maintains":[199],"0.78.":[204],"makes":[206],"effective":[209],"data-poisoning":[210],"technique.":[212],"The":[213],"code":[214],"is":[215],"available":[216],"https://github.com/CandleLabAI/SpotOn-AttackOnDNNs.":[218]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}