{"id":"https://openalex.org/W4384948718","doi":"https://doi.org/10.1109/sp46215.2023.10179347","title":"Jigsaw Puzzle: Selective Backdoor Attack to Subvert Malware Classifiers","display_name":"Jigsaw Puzzle: Selective Backdoor Attack to Subvert Malware Classifiers","publication_year":2023,"publication_date":"2023-05-01","ids":{"openalex":"https://openalex.org/W4384948718","doi":"https://doi.org/10.1109/sp46215.2023.10179347"},"language":"en","primary_location":{"id":"doi:10.1109/sp46215.2023.10179347","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179347","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100782696","display_name":"Yang Li","orcid":"https://orcid.org/0000-0003-3892-6397"},"institutions":[{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Limin Yang","raw_affiliation_strings":["University of Illinois at Urbana-Champaign"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Illinois at Urbana-Champaign","institution_ids":["https://openalex.org/I157725225"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017769599","display_name":"Zhi Chen","orcid":"https://orcid.org/0000-0002-4734-368X"},"institutions":[{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhi Chen","raw_affiliation_strings":["University of Illinois at Urbana-Champaign"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Illinois at Urbana-Champaign","institution_ids":["https://openalex.org/I157725225"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025184689","display_name":"Jacopo Cortellazzi","orcid":null},"institutions":[{"id":"https://openalex.org/I183935753","display_name":"King's College London","ror":"https://ror.org/0220mzb33","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I183935753"]},{"id":"https://openalex.org/I45129253","display_name":"University College London","ror":"https://ror.org/02jx3x895","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I45129253"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Jacopo Cortellazzi","raw_affiliation_strings":["King’s College London","University College London"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"King’s College London","institution_ids":["https://openalex.org/I183935753"]},{"raw_affiliation_string":"University College London","institution_ids":["https://openalex.org/I45129253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090260871","display_name":"Feargus Pendlebury","orcid":"https://orcid.org/0000-0003-1140-322X"},"institutions":[{"id":"https://openalex.org/I45129253","display_name":"University College London","ror":"https://ror.org/02jx3x895","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I45129253"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Feargus Pendlebury","raw_affiliation_strings":["University College London"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University College London","institution_ids":["https://openalex.org/I45129253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040098785","display_name":"Kevin Tu","orcid":"https://orcid.org/0000-0002-2458-7083"},"institutions":[{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kevin Tu","raw_affiliation_strings":["University of Illinois at Urbana-Champaign"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Illinois at Urbana-Champaign","institution_ids":["https://openalex.org/I157725225"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072597369","display_name":"Fabio Pierazzi","orcid":"https://orcid.org/0000-0002-1254-1758"},"institutions":[{"id":"https://openalex.org/I183935753","display_name":"King's College London","ror":"https://ror.org/0220mzb33","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I183935753"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Fabio Pierazzi","raw_affiliation_strings":["King’s College London"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"King’s College London","institution_ids":["https://openalex.org/I183935753"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036908366","display_name":"Lorenzo Cavallaro","orcid":"https://orcid.org/0000-0002-3878-2680"},"institutions":[{"id":"https://openalex.org/I45129253","display_name":"University College London","ror":"https://ror.org/02jx3x895","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I45129253"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Lorenzo Cavallaro","raw_affiliation_strings":["University College London"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University College London","institution_ids":["https://openalex.org/I45129253"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100367418","display_name":"Gang Wang","orcid":"https://orcid.org/0000-0002-8910-8979"},"institutions":[{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gang Wang","raw_affiliation_strings":["University of Illinois at Urbana-Champaign"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Illinois at Urbana-Champaign","institution_ids":["https://openalex.org/I157725225"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":6.0416,"has_fulltext":false,"cited_by_count":25,"citation_normalized_percentile":{"value":0.97914714,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"719","last_page":"736"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9962999820709229,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9933000206947327,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9450456500053406},{"id":"https://openalex.org/keywords/jigsaw","display_name":"Jigsaw","score":0.9008193016052246},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8328886032104492},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7125299572944641},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4789212942123413},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4407419264316559},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.10481667518615723},{"id":"https://openalex.org/keywords/mathematics-education","display_name":"Mathematics education","score":0.07251793146133423}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9450456500053406},{"id":"https://openalex.org/C2779405079","wikidata":"https://www.wikidata.org/wiki/Q356040","display_name":"Jigsaw","level":2,"score":0.9008193016052246},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8328886032104492},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7125299572944641},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4789212942123413},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4407419264316559},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.10481667518615723},{"id":"https://openalex.org/C145420912","wikidata":"https://www.wikidata.org/wiki/Q853077","display_name":"Mathematics education","level":1,"score":0.07251793146133423}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/sp46215.2023.10179347","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179347","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":127,"referenced_works":["https://openalex.org/W1463623766","https://openalex.org/W2122672392","https://openalex.org/W2143365760","https://openalex.org/W2407313496","https://openalex.org/W2625739732","https://openalex.org/W2748789698","https://openalex.org/W2753783305","https://openalex.org/W2774423163","https://openalex.org/W2776884785","https://openalex.org/W2784452215","https://openalex.org/W2793931959","https://openalex.org/W2807363941","https://openalex.org/W2849849680","https://openalex.org/W2898759955","https://openalex.org/W2916360674","https://openalex.org/W2934843808","https://openalex.org/W2946227741","https://openalex.org/W2962862931","https://openalex.org/W2963562762","https://openalex.org/W2963777745","https://openalex.org/W2964636835","https://openalex.org/W2966689772","https://openalex.org/W2970335439","https://openalex.org/W2971661634","https://openalex.org/W2982756474","https://openalex.org/W2985913519","https://openalex.org/W2988471847","https://openalex.org/W2990270730","https://openalex.org/W2995164118","https://openalex.org/W3007930164","https://openalex.org/W3010216907","https://openalex.org/W3012161115","https://openalex.org/W3015481738","https://openalex.org/W3023868144","https://openalex.org/W3024103409","https://openalex.org/W3034258347","https://openalex.org/W3034579202","https://openalex.org/W3035419960","https://openalex.org/W3038046627","https://openalex.org/W3084078945","https://openalex.org/W3093239278","https://openalex.org/W3096264229","https://openalex.org/W3105646798","https://openalex.org/W3106646114","https://openalex.org/W3107337211","https://openalex.org/W3108535146","https://openalex.org/W3111237076","https://openalex.org/W3112001526","https://openalex.org/W3113251160","https://openalex.org/W3114686421","https://openalex.org/W3114838227","https://openalex.org/W3120073944","https://openalex.org/W3121478722","https://openalex.org/W3130788031","https://openalex.org/W3152624640","https://openalex.org/W3152758407","https://openalex.org/W3156423484","https://openalex.org/W3170465383","https://openalex.org/W3180545700","https://openalex.org/W3189812816","https://openalex.org/W3194679964","https://openalex.org/W3195462295","https://openalex.org/W3206057312","https://openalex.org/W3206773754","https://openalex.org/W3211600423","https://openalex.org/W3212023986","https://openalex.org/W3214399478","https://openalex.org/W3214636874","https://openalex.org/W3214686023","https://openalex.org/W4206437641","https://openalex.org/W4214537185","https://openalex.org/W4214564822","https://openalex.org/W4214680449","https://openalex.org/W4214737857","https://openalex.org/W4221158906","https://openalex.org/W4244726870","https://openalex.org/W4287207231","https://openalex.org/W4287281082","https://openalex.org/W4288057740","https://openalex.org/W4288057743","https://openalex.org/W4288375071","https://openalex.org/W4298140072","https://openalex.org/W4300687693","https://openalex.org/W4312329299","https://openalex.org/W4312700692","https://openalex.org/W4312877401","https://openalex.org/W4313192591","https://openalex.org/W4385679845","https://openalex.org/W6628591231","https://openalex.org/W6681673350","https://openalex.org/W6737947904","https://openalex.org/W6743581629","https://openalex.org/W6746897123","https://openalex.org/W6748325151","https://openalex.org/W6749794497","https://openalex.org/W6750318962","https://openalex.org/W6750462152","https://openalex.org/W6753153400","https://openalex.org/W6756074407","https://openalex.org/W6756333562","https://openalex.org/W6759622168","https://openalex.org/W6761377332","https://openalex.org/W6766336336","https://openalex.org/W6770286897","https://openalex.org/W6771533808","https://openalex.org/W6771747359","https://openalex.org/W6773640337","https://openalex.org/W6774126473","https://openalex.org/W6774227537","https://openalex.org/W6776469819","https://openalex.org/W6779690972","https://openalex.org/W6784558051","https://openalex.org/W6786854854","https://openalex.org/W6787777936","https://openalex.org/W6787959460","https://openalex.org/W6788876066","https://openalex.org/W6789325072","https://openalex.org/W6789730115","https://openalex.org/W6791576469","https://openalex.org/W6793958797","https://openalex.org/W6794566239","https://openalex.org/W6798228747","https://openalex.org/W6802862418","https://openalex.org/W6803053407","https://openalex.org/W6803329306","https://openalex.org/W6803329705","https://openalex.org/W6810095145"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4386080799","https://openalex.org/W3140988292","https://openalex.org/W4317672133","https://openalex.org/W4401407399"],"abstract_inverted_index":{"Malware":[0],"classifiers":[1,51,86],"are":[2,87,158],"subject":[3],"to":[4,8,11,117,120,136,221],"training-time":[5],"exploitation":[6],"due":[7],"the":[9,18,24,34,57,68,72,109,138,142,148,152,155,171],"need":[10],"regularly":[12],"retrain":[13],"using":[14,177],"samples":[15],"collected":[16],"from":[17,182,210],"wild.":[19],"Recent":[20],"work":[21],"has":[22],"demonstrated":[23],"feasibility":[25],"of":[26,36,74,141],"backdoor":[27,54,82,149,223],"attacks":[28,38,55,83],"against":[29,84,198],"malware":[30,50,85,113,125,143],"classifiers,":[31],"and":[32,52,146,154,201],"yet":[33],"stealthiness":[35],"such":[37,93],"is":[39,191,202],"not":[40,63],"well":[41],"understood.":[42],"In":[43],"this":[44],"paper,":[45],"we":[46,78,99],"focus":[47,166],"on":[48,108,167],"Android":[49],"investigate":[53],"under":[56],"clean-label":[58],"setting":[59],"(i.e.,":[60],"attackers":[61],"do":[62],"have":[64,115],"complete":[65],"control":[66],"over":[67],"training":[69],"process":[70],"or":[71],"labeling":[73],"poisoned":[75],"data).":[76],"Empirically,":[77],"show":[79],"that":[80,112,188,208],"existing":[81],"still":[88],"detectable":[89],"by":[90,217],"recent":[91],"defenses":[92],"as":[94,193],"MNTD.":[95],"To":[96],"improve":[97,222],"stealthiness,":[98],"propose":[100],"a":[101,134,162,194,203],"new":[102],"attack,":[103],"Jigsaw":[104,131,189],"Puzzle":[105,132,190],"(JP),":[106],"based":[107],"key":[110],"observation":[111],"authors":[114],"little":[116],"no":[118],"incentive":[119],"protect":[121],"any":[122],"other":[123],"authors\u2019":[124],"but":[126],"their":[127],"own.":[128],"As":[129],"such,":[130],"learns":[133],"trigger":[135,153],"complement":[137],"latent":[139,156],"patterns":[140],"author\u2019s":[144],"samples,":[145],"activates":[147],"only":[150],"when":[151],"pattern":[157],"pieced":[159],"together":[160],"in":[161,170,205],"sample.":[163],"We":[164,215],"further":[165],"realizable":[168],"triggers":[169],"problem":[172],"space":[173],"(e.g.,":[174],"software":[175],"code)":[176],"bytecode":[178],"gadgets":[179],"broadly":[180],"harvested":[181],"benign":[183],"software.":[184],"Our":[185],"evaluation":[186],"confirms":[187],"effective":[192],"backdoor,":[195],"remains":[196],"stealthy":[197],"state-of-the-art":[199],"defenses,":[200],"threat":[204],"realistic":[206],"settings":[207],"depart":[209],"reasoning":[211],"about":[212],"feature-space-only":[213],"attacks.":[214],"conclude":[216],"exploring":[218],"promising":[219],"approaches":[220],"defenses.":[224]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":13},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":3}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}