{"id":"https://openalex.org/W4323022583","doi":"https://doi.org/10.1109/tc.2023.3251864","title":"AI Trojan Attack for Evading Machine Learning-Based Detection of Hardware Trojans","display_name":"AI Trojan Attack for Evading Machine Learning-Based Detection of Hardware Trojans","publication_year":2023,"publication_date":"2023-03-02","ids":{"openalex":"https://openalex.org/W4323022583","doi":"https://doi.org/10.1109/tc.2023.3251864"},"language":"en","primary_location":{"id":"doi:10.1109/tc.2023.3251864","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tc.2023.3251864","pdf_url":null,"source":{"id":"https://openalex.org/S157670870","display_name":"IEEE Transactions on Computers","issn_l":"0018-9340","issn":["0018-9340","0016-9340","1557-9956","2326-3814"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computers","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013876571","display_name":"Zhixin Pan","orcid":"https://orcid.org/0000-0001-9136-1730"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhixin Pan","raw_affiliation_strings":["Department of Computer & Information Science & Engineering, University of Florida, Gainesville, FL, USA","Department of Computer & Information Science & Engineering, University of Florida, USA"],"raw_orcid":"https://orcid.org/0000-0001-9136-1730","affiliations":[{"raw_affiliation_string":"Department of Computer & Information Science & Engineering, University of Florida, Gainesville, FL, USA","institution_ids":["https://openalex.org/I33213144"]},{"raw_affiliation_string":"Department of Computer & Information Science & Engineering, University of Florida, USA","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5006818844","display_name":"Prabhat Mishra","orcid":"https://orcid.org/0000-0003-3653-6221"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Prabhat Mishra","raw_affiliation_strings":["Department of Computer & Information Science & Engineering, University of Florida, Gainesville, FL, USA","Department of Computer & Information Science & Engineering, University of Florida, USA"],"raw_orcid":"https://orcid.org/0000-0003-3653-6221","affiliations":[{"raw_affiliation_string":"Department of Computer & Information Science & Engineering, University of Florida, Gainesville, FL, USA","institution_ids":["https://openalex.org/I33213144"]},{"raw_affiliation_string":"Department of Computer & Information Science & Engineering, University of Florida, USA","institution_ids":["https://openalex.org/I33213144"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I33213144"],"apc_list":null,"apc_paid":null,"fwci":2.9157,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.9089586,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":"74","issue":"3","first_page":"860","last_page":"874"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14117","display_name":"Integrated Circuits and Semiconductor Failure Analysis","score":0.9872000217437744,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/trojan","display_name":"Trojan","score":0.9319260716438293},{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9015229940414429},{"id":"https://openalex.org/keywords/hardware-trojan","display_name":"Hardware Trojan","score":0.8838321566581726},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6999456882476807},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.6975058913230896},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6050298810005188},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5759187936782837},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.44924139976501465},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3645579516887665},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.24732837080955505},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2158375084400177}],"concepts":[{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.9319260716438293},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9015229940414429},{"id":"https://openalex.org/C2780873074","wikidata":"https://www.wikidata.org/wiki/Q5656397","display_name":"Hardware Trojan","level":3,"score":0.8838321566581726},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6999456882476807},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.6975058913230896},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6050298810005188},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5759187936782837},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.44924139976501465},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3645579516887665},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.24732837080955505},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2158375084400177}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tc.2023.3251864","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tc.2023.3251864","pdf_url":null,"source":{"id":"https://openalex.org/S157670870","display_name":"IEEE Transactions on Computers","issn_l":"0018-9340","issn":["0018-9340","0016-9340","1557-9956","2326-3814"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computers","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W2074376560","https://openalex.org/W2078516287","https://openalex.org/W2112796928","https://openalex.org/W2161998562","https://openalex.org/W2400831429","https://openalex.org/W2464661970","https://openalex.org/W2572139170","https://openalex.org/W2724859555","https://openalex.org/W2753199827","https://openalex.org/W2756703387","https://openalex.org/W2807363941","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W2985954225","https://openalex.org/W2986013765","https://openalex.org/W2990270730","https://openalex.org/W3000731494","https://openalex.org/W3109235236","https://openalex.org/W3116877279","https://openalex.org/W3119752259","https://openalex.org/W3138946836","https://openalex.org/W3158240034","https://openalex.org/W4237573843","https://openalex.org/W4246193833","https://openalex.org/W4280509519","https://openalex.org/W4280636456","https://openalex.org/W6676935882","https://openalex.org/W6746897123","https://openalex.org/W6766253520","https://openalex.org/W6779272815","https://openalex.org/W6786578027","https://openalex.org/W6789792027","https://openalex.org/W6790503462","https://openalex.org/W6790777776"],"related_works":["https://openalex.org/W4385434494","https://openalex.org/W4392003106","https://openalex.org/W3159333627","https://openalex.org/W3106646114","https://openalex.org/W3004467197","https://openalex.org/W4308244459","https://openalex.org/W2091750459","https://openalex.org/W2999465529","https://openalex.org/W4328053173","https://openalex.org/W1500594134"],"abstract_inverted_index":{"The":[0,63],"globalized":[1],"semiconductor":[2],"supply":[3],"chain":[4],"significantly":[5],"increases":[6],"the":[7,77,91],"risk":[8],"of":[9],"exposing":[10],"System-on-Chip":[11],"(SoC)":[12],"designs":[13],"to":[14,28,58,68],"hardware":[15],"Trojans.":[16],"While":[17],"machine":[18],"learning":[19],"(ML)":[20],"based":[21,120],"Trojan":[22,42,55,72],"detection":[23,34,56],"approaches":[24],"are":[25,39],"promising":[26],"due":[27],"their":[29],"scalability":[30],"as":[31,33],"well":[32],"accuracy,":[35],"ML-based":[36,54],"methods":[37,119],"themselves":[38],"vulnerable":[40],"from":[41],"attacks.":[43,123],"In":[44],"this":[45,60],"paper,":[46],"we":[47],"propose":[48],"a":[49,104],"robust":[50],"backdoor":[51],"attack":[52,112],"on":[53,121],"algorithms":[57],"demonstrate":[59,89],"serious":[61],"vulnerability.":[62],"proposed":[64,92],"framework":[65],"is":[66],"able":[67],"design":[69],"an":[70],"AI":[71,93],"and":[73,106],"implant":[74],"it":[75],"inside":[76],"ML":[78],"model":[79],"that":[80,90,115],"can":[81,95],"be":[82],"triggered":[83],"by":[84],"specific":[85],"inputs.":[86],"Experimental":[87],"results":[88],"Trojans":[94],"bypass":[96],"state-of-the-art":[97],"defense":[98],"algorithms.":[99],"Moreover,":[100],"our":[101],"approach":[102],"provides":[103],"fast":[105],"cost-effective":[107],"solution":[108],"in":[109],"achieving":[110],"100%":[111],"success":[113],"rate":[114],"outperforms":[116],"state-of-the":[117],"art":[118],"adversarial":[122]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":4}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}