{"id":"https://openalex.org/W3088499471","doi":"https://doi.org/10.1109/tcad.2020.3024780","title":"Training Data Poisoning in ML-CAD: Backdooring DL-Based Lithographic Hotspot Detectors","display_name":"Training Data Poisoning in ML-CAD: Backdooring DL-Based Lithographic Hotspot Detectors","publication_year":2020,"publication_date":"2020-09-18","ids":{"openalex":"https://openalex.org/W3088499471","doi":"https://doi.org/10.1109/tcad.2020.3024780","mag":"3088499471"},"language":"en","primary_location":{"id":"doi:10.1109/tcad.2020.3024780","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcad.2020.3024780","pdf_url":null,"source":{"id":"https://openalex.org/S100835903","display_name":"IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems","issn_l":"0278-0070","issn":["0278-0070","1937-4151"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100389879","display_name":"Kang Liu","orcid":"https://orcid.org/0000-0001-7231-8315"},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kang Liu","raw_affiliation_strings":["Department of Electrical and Computer Engineering, New York University, Brooklyn, NY, USA","[Department of Electrical, and Computer Engineering, New York University, Brooklyn, NY, USA]"],"raw_orcid":"https://orcid.org/0000-0001-7231-8315","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, New York University, Brooklyn, NY, USA","institution_ids":["https://openalex.org/I57206974"]},{"raw_affiliation_string":"[Department of Electrical, and Computer Engineering, New York University, Brooklyn, NY, USA]","institution_ids":["https://openalex.org/I57206974"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069388936","display_name":"Benjamin Tan","orcid":"https://orcid.org/0000-0002-7642-3638"},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Benjamin Tan","raw_affiliation_strings":["Department of Electrical and Computer Engineering, New York University, Brooklyn, NY, USA","[Department of Electrical, and Computer Engineering, New York University, Brooklyn, NY, USA]"],"raw_orcid":"https://orcid.org/0000-0002-7642-3638","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, New York University, Brooklyn, NY, USA","institution_ids":["https://openalex.org/I57206974"]},{"raw_affiliation_string":"[Department of Electrical, and Computer Engineering, New York University, Brooklyn, NY, USA]","institution_ids":["https://openalex.org/I57206974"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059648257","display_name":"Ramesh Karri","orcid":"https://orcid.org/0000-0001-7989-5617"},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ramesh Karri","raw_affiliation_strings":["Department of Electrical and Computer Engineering, New York University, Brooklyn, NY, USA","[Department of Electrical, and Computer Engineering, New York University, Brooklyn, NY, USA]"],"raw_orcid":"https://orcid.org/0000-0001-7989-5617","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, New York University, Brooklyn, NY, USA","institution_ids":["https://openalex.org/I57206974"]},{"raw_affiliation_string":"[Department of Electrical, and Computer Engineering, New York University, Brooklyn, NY, USA]","institution_ids":["https://openalex.org/I57206974"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5010950688","display_name":"Siddharth Garg","orcid":"https://orcid.org/0000-0002-6158-9512"},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Siddharth Garg","raw_affiliation_strings":["Department of Electrical and Computer Engineering, New York University, Brooklyn, NY, USA","[Department of Electrical, and Computer Engineering, New York University, Brooklyn, NY, USA]"],"raw_orcid":"https://orcid.org/0000-0002-6158-9512","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, New York University, Brooklyn, NY, USA","institution_ids":["https://openalex.org/I57206974"]},{"raw_affiliation_string":"[Department of Electrical, and Computer Engineering, New York University, Brooklyn, NY, USA]","institution_ids":["https://openalex.org/I57206974"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I57206974"],"apc_list":null,"apc_paid":null,"fwci":0.3911,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.69217581,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"40","issue":"6","first_page":"1244","last_page":"1257"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9948999881744385,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14117","display_name":"Integrated Circuits and Semiconductor Failure Analysis","score":0.994700014591217,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.7546741962432861},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7544301152229309},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.7111189365386963},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5357465147972107},{"id":"https://openalex.org/keywords/cad","display_name":"CAD","score":0.488841712474823},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4869455099105835},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4779106080532074},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.4366893768310547},{"id":"https://openalex.org/keywords/hotspot","display_name":"Hotspot (geology)","score":0.43428462743759155},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.430083304643631},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4209993779659271},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.41376906633377075},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.33320504426956177},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.1253570020198822}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.7546741962432861},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7544301152229309},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.7111189365386963},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5357465147972107},{"id":"https://openalex.org/C194789388","wikidata":"https://www.wikidata.org/wiki/Q17855283","display_name":"CAD","level":2,"score":0.488841712474823},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4869455099105835},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4779106080532074},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.4366893768310547},{"id":"https://openalex.org/C146481406","wikidata":"https://www.wikidata.org/wiki/Q105131","display_name":"Hotspot (geology)","level":2,"score":0.43428462743759155},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.430083304643631},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4209993779659271},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.41376906633377075},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.33320504426956177},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.1253570020198822},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C199639397","wikidata":"https://www.wikidata.org/wiki/Q1788588","display_name":"Engineering drawing","level":1,"score":0.0},{"id":"https://openalex.org/C8058405","wikidata":"https://www.wikidata.org/wiki/Q46255","display_name":"Geophysics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tcad.2020.3024780","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcad.2020.3024780","pdf_url":null,"source":{"id":"https://openalex.org/S100835903","display_name":"IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems","issn_l":"0278-0070","issn":["0278-0070","1937-4151"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.44999998807907104,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G2989255803","display_name":"CAREER: Re-thinking Electronic Design Automation Algorithms for Secure Outsourced Integrated Circuit Fabrication","funder_award_id":"1553419","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G3480130277","display_name":"SaTC: CORE: Medium: Collaborative: Towards Trustworthy Deep Neural Network Based AI: A Systems Approach","funder_award_id":"1801495","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G4226726185","display_name":null,"funder_award_id":"N00014-18-1-2058","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":66,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W1945616565","https://openalex.org/W2057596653","https://openalex.org/W2068961782","https://openalex.org/W2092970276","https://openalex.org/W2151298633","https://openalex.org/W2187089797","https://openalex.org/W2194775991","https://openalex.org/W2267635276","https://openalex.org/W2300242332","https://openalex.org/W2538780316","https://openalex.org/W2543927648","https://openalex.org/W2620038827","https://openalex.org/W2764043458","https://openalex.org/W2772825438","https://openalex.org/W2773446523","https://openalex.org/W2794271438","https://openalex.org/W2797469317","https://openalex.org/W2798302089","https://openalex.org/W2804151869","https://openalex.org/W2806976363","https://openalex.org/W2807363941","https://openalex.org/W2886189420","https://openalex.org/W2891710009","https://openalex.org/W2892090366","https://openalex.org/W2896499334","https://openalex.org/W2899885603","https://openalex.org/W2911065142","https://openalex.org/W2934843808","https://openalex.org/W2936148765","https://openalex.org/W2942091739","https://openalex.org/W2945381924","https://openalex.org/W2945706499","https://openalex.org/W2945764596","https://openalex.org/W2946443981","https://openalex.org/W2962949351","https://openalex.org/W2963207607","https://openalex.org/W2963343288","https://openalex.org/W2963744840","https://openalex.org/W2963752115","https://openalex.org/W2963857521","https://openalex.org/W2964153729","https://openalex.org/W2970200861","https://openalex.org/W2986013765","https://openalex.org/W2996061341","https://openalex.org/W3007437825","https://openalex.org/W3014404070","https://openalex.org/W3035808436","https://openalex.org/W3100646226","https://openalex.org/W3121891885","https://openalex.org/W4211047985","https://openalex.org/W4247200422","https://openalex.org/W4252979261","https://openalex.org/W4288079630","https://openalex.org/W4288093767","https://openalex.org/W4295262505","https://openalex.org/W4298140072","https://openalex.org/W6637162671","https://openalex.org/W6640425456","https://openalex.org/W6673865454","https://openalex.org/W6693397755","https://openalex.org/W6745148473","https://openalex.org/W6750384299","https://openalex.org/W6750462152","https://openalex.org/W6754642193","https://openalex.org/W6767183785"],"related_works":["https://openalex.org/W4320018150","https://openalex.org/W4328053081","https://openalex.org/W4366850823","https://openalex.org/W3086120435","https://openalex.org/W2040808657","https://openalex.org/W2918664383","https://openalex.org/W4320855730","https://openalex.org/W106056076","https://openalex.org/W2135200719","https://openalex.org/W2989852175"],"abstract_inverted_index":{"Recent":[0],"efforts":[1],"to":[2,33,56,116,150],"enhance":[3],"computer-aided":[4],"design":[5,97,156],"(CAD)":[6],"flows":[7],"have":[8],"seen":[9],"the":[10,42,69,118,137,154,190,202],"proliferation":[11],"of":[12,68,192,204],"machine":[13],"learning":[14,29],"(ML)-based":[15],"techniques.":[16],"However,":[17],"despite":[18],"achieving":[19],"state-of-the-art":[20],"performance":[21],"in":[22,111,136,195],"many":[23],"domains,":[24],"techniques,":[25],"such":[26],"as":[27,66],"deep":[28,61],"(DL)":[30],"are":[31,165],"susceptible":[32],"various":[34],"adversarial":[35],"attacks.":[36],"In":[37],"this":[38],"work,":[39],"we":[40,80,169,198],"explore":[41,81,170],"threat":[43],"posed":[44],"by":[45,130],"training":[46,87,112,161],"data":[47,88,109,113,162,177],"poisoning":[48,163],"attacks":[49,164],"where":[50],"a":[51,60,73,132,145,171],"malicious":[52],"insider":[53],"can":[54,85,122],"try":[55],"insert":[57],"backdoors":[58],"into":[59,201],"neural":[62],"network":[63],"(DNN)":[64],"used":[65],"part":[67],"CAD":[70],"flow.":[71],"Using":[72],"case":[74],"study":[75],"on":[76],"lithographic":[77],"hotspot":[78,125],"detection,":[79],"how":[82],"an":[83,120],"adversary":[84,121],"contaminate":[86],"with":[89,139],"specially":[90],"crafted,":[91],"yet":[92],"meaningful,":[93],"genuinely":[94],"labeled,":[95],"and":[96,152,167,197],"rule":[98],"compliant":[99],"poisoned":[100],"clips.":[101],"Our":[102,184],"experiments":[103],"show":[104],"that":[105,160],"very":[106],"low":[107],"poisoned/clean":[108],"ratio":[110],"is":[114],"sufficient":[115],"backdoor":[117,133],"DNN;":[119],"\u201chide\u201d":[123],"specific":[124],"clips":[126],"at":[127],"inference":[128],"time":[129],"including":[131],"trigger":[134],"shape":[135],"input":[138],"~100%":[140],"success.":[141],"This":[142],"attack":[143,181],"provides":[144],"novel":[146],"way":[147],"for":[148],"adversaries":[149],"sabotage":[151],"disrupt":[153],"distributed":[155],"process.":[157],"After":[158],"finding":[159],"feasible":[166],"stealthy,":[168],"potential":[172],"ensemble":[173],"defense":[174],"against":[175],"possible":[176],"contamination,":[178],"showing":[179],"promising":[180],"success":[182],"reduction.":[183],"results":[185],"raise":[186],"fundamental":[187],"questions":[188],"about":[189],"robustness":[191],"DL-based":[193],"systems":[194],"CAD,":[196],"provide":[199],"insights":[200],"implications":[203],"these.":[205]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2021,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}