{"id":"https://openalex.org/W3195232018","doi":"https://doi.org/10.1109/sp46214.2022.9833596","title":"\u201cAdversarial Examples\u201d for Proof-of-Learning","display_name":"\u201cAdversarial Examples\u201d for Proof-of-Learning","publication_year":2022,"publication_date":"2022-05-01","ids":{"openalex":"https://openalex.org/W3195232018","doi":"https://doi.org/10.1109/sp46214.2022.9833596","mag":"3195232018"},"language":"en","primary_location":{"id":"doi:10.1109/sp46214.2022.9833596","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46214.2022.9833596","pdf_url":null,"source":{"id":"https://openalex.org/S4363606603","display_name":"2022 IEEE Symposium on Security and Privacy (SP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100421958","display_name":"Rui Zhang","orcid":"https://orcid.org/0009-0000-9961-1108"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Rui Zhang","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100414731","display_name":"Jian Liu","orcid":"https://orcid.org/0000-0003-3258-0380"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jian Liu","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011547993","display_name":"Yuan Ding","orcid":"https://orcid.org/0000-0002-5953-3800"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuan Ding","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100422345","display_name":"Zhibo Wang","orcid":"https://orcid.org/0000-0002-5804-3279"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhibo Wang","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113889623","display_name":"Qingbiao Wu","orcid":null},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qingbiao Wu","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5105297718","display_name":"Kui Ren","orcid":"https://orcid.org/0000-0002-1969-2591"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kui Ren","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I76130692"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":21,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1408","last_page":"1422"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.9919999837875366,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12535","display_name":"Machine Learning and Data Classification","score":0.9901999831199646,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/gas-meter-prover","display_name":"Gas meter prover","score":0.9043017029762268},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7433412075042725},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7277591228485107},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.6335400342941284},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.6258825659751892},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.6208629608154297},{"id":"https://openalex.org/keywords/point","display_name":"Point (geometry)","score":0.5478326082229614},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.5394059419631958},{"id":"https://openalex.org/keywords/proof-of-concept","display_name":"Proof of concept","score":0.5021898746490479},{"id":"https://openalex.org/keywords/computation","display_name":"Computation","score":0.45227959752082825},{"id":"https://openalex.org/keywords/automated-theorem-proving","display_name":"Automated theorem proving","score":0.4271843433380127},{"id":"https://openalex.org/keywords/adversary-model","display_name":"Adversary model","score":0.4256005883216858},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3986862599849701},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.36073994636535645},{"id":"https://openalex.org/keywords/mathematical-proof","display_name":"Mathematical proof","score":0.24116533994674683},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.18828752636909485},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.18030968308448792}],"concepts":[{"id":"https://openalex.org/C159718280","wikidata":"https://www.wikidata.org/wiki/Q5526353","display_name":"Gas meter prover","level":3,"score":0.9043017029762268},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7433412075042725},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7277591228485107},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.6335400342941284},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.6258825659751892},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.6208629608154297},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.5478326082229614},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.5394059419631958},{"id":"https://openalex.org/C124978682","wikidata":"https://www.wikidata.org/wiki/Q1201019","display_name":"Proof of concept","level":2,"score":0.5021898746490479},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.45227959752082825},{"id":"https://openalex.org/C206880738","wikidata":"https://www.wikidata.org/wiki/Q431667","display_name":"Automated theorem proving","level":2,"score":0.4271843433380127},{"id":"https://openalex.org/C7606001","wikidata":"https://www.wikidata.org/wiki/Q4686702","display_name":"Adversary model","level":3,"score":0.4256005883216858},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3986862599849701},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.36073994636535645},{"id":"https://openalex.org/C108710211","wikidata":"https://www.wikidata.org/wiki/Q11538","display_name":"Mathematical proof","level":2,"score":0.24116533994674683},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.18828752636909485},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.18030968308448792},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/sp46214.2022.9833596","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46214.2022.9833596","pdf_url":null,"source":{"id":"https://openalex.org/S4363606603","display_name":"2022 IEEE Symposium on Security and Privacy (SP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":58,"referenced_works":["https://openalex.org/W1424543055","https://openalex.org/W1667652561","https://openalex.org/W1673923490","https://openalex.org/W1945616565","https://openalex.org/W2018746447","https://openalex.org/W2098843110","https://openalex.org/W2108598243","https://openalex.org/W2194775991","https://openalex.org/W2217248474","https://openalex.org/W2294138114","https://openalex.org/W2342045095","https://openalex.org/W2402144811","https://openalex.org/W2461943168","https://openalex.org/W2541884796","https://openalex.org/W2560358147","https://openalex.org/W2734506812","https://openalex.org/W2744095836","https://openalex.org/W2752689052","https://openalex.org/W2765424254","https://openalex.org/W2774644650","https://openalex.org/W2775467454","https://openalex.org/W2776884785","https://openalex.org/W2786118190","https://openalex.org/W2789352577","https://openalex.org/W2794982701","https://openalex.org/W2913570153","https://openalex.org/W2963165448","https://openalex.org/W2963207607","https://openalex.org/W2963303354","https://openalex.org/W2963844355","https://openalex.org/W2964082701","https://openalex.org/W2964153729","https://openalex.org/W2964318098","https://openalex.org/W2970408908","https://openalex.org/W2970971581","https://openalex.org/W3021654819","https://openalex.org/W3038028469","https://openalex.org/W3103557498","https://openalex.org/W3103802018","https://openalex.org/W3108940306","https://openalex.org/W3115505421","https://openalex.org/W3118608800","https://openalex.org/W3154581591","https://openalex.org/W4294106961","https://openalex.org/W4302296459","https://openalex.org/W4318619660","https://openalex.org/W6637151318","https://openalex.org/W6637162671","https://openalex.org/W6640425456","https://openalex.org/W6688549366","https://openalex.org/W6728757088","https://openalex.org/W6730503085","https://openalex.org/W6743821447","https://openalex.org/W6747920752","https://openalex.org/W6759226220","https://openalex.org/W6771536673","https://openalex.org/W6787443072","https://openalex.org/W6787972765"],"related_works":["https://openalex.org/W4246350535","https://openalex.org/W3083050876","https://openalex.org/W1875958796","https://openalex.org/W1780472831","https://openalex.org/W1976200187","https://openalex.org/W1561644379","https://openalex.org/W2969536091","https://openalex.org/W2885010049","https://openalex.org/W2060759735","https://openalex.org/W783488073"],"abstract_inverted_index":{"In":[0,111],"S&P":[1],"21,":[2],"Jia":[3,84],"et":[4,85],"al.":[5,86],"proposed":[6],"a":[7,15,21,39,64,102,126,142,166,175],"new":[8],"concept/mechanism":[9],"named":[10],"proof-of-learning":[11],"(PoL),":[12],"which":[13],"allows":[14],"prover":[16,55],"to":[17,79,121,164],"demonstrate":[18],"ownership":[19],"of":[20,28,66,104],"machine":[22],"learning":[23],"model":[24,95],"by":[25,53,177],"proving":[26],"integrity":[27],"the":[29,54,58,74,93,178],"training":[30,97],"procedure.":[31],"It":[32],"guarantees":[33],"that":[34,51,88,117,160],"an":[35,89,131,137],"adversary":[36,90],"cannot":[37,99],"construct":[38],"valid":[40,167],"proof":[41,62,168,176],"with":[42,73,107,150,169],"less":[43,171],"cost":[44,172],"(in":[45],"both":[46,156],"computation":[47],"and":[48,96,158],"storage)":[49],"than":[50,173],"made":[52],"in":[56,125],"generating":[57,147,174],"proof.":[59],"A":[60],"PoL":[61,118],"includes":[63],"set":[65,103],"intermediate":[67,105,148],"models":[68,106,149],"recorded":[69,82],"during":[70],"training,":[71],"together":[72],"corresponding":[75],"data":[76,109,139,152],"points":[77],"used":[78],"obtain":[80],"each":[81],"model.":[83],"claimed":[87],"merely":[91],"knowing":[92],"final":[94],"dataset":[98],"efficiently":[100,146],"find":[101],"correct":[108,151],"points.":[110,153],"this":[112],"paper,":[113],"however,":[114],"we":[115,134,161],"show":[116],"is":[119],"vulnerable":[120],"\u201cadversarial":[122],"examples\u201d!":[123],"Specifically,":[124],"similar":[127],"way":[128],"as":[129],"optimizing":[130],"adversarial":[132],"example,":[133],"could":[135],"make":[136],"arbitrarily-chosen":[138],"point":[140],"\u201cgenerate\u201d":[141],"given":[143],"model,":[144],"hence":[145],"We":[154],"demonstrate,":[155],"theoretically":[157],"empirically,":[159],"are":[162],"able":[163],"generate":[165],"significantly":[170],"prover.":[179]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":9},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}