{"id":"https://openalex.org/W4210730751","doi":"https://doi.org/10.1109/tdsc.2022.3144988","title":"Defeating Misclassification Attacks Against Transfer Learning","display_name":"Defeating Misclassification Attacks Against Transfer Learning","publication_year":2022,"publication_date":"2022-01-25","ids":{"openalex":"https://openalex.org/W4210730751","doi":"https://doi.org/10.1109/tdsc.2022.3144988"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2022.3144988","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3144988","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5012701826","display_name":"Bang Ye Wu","orcid":null},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Bang Wu","raw_affiliation_strings":["Department of Information Technology, Monash University, Clayton, VIC, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Technology, Monash University, Clayton, VIC, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100400133","display_name":"Shuo Wang","orcid":"https://orcid.org/0000-0001-8938-2364"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shuo Wang","raw_affiliation_strings":["CSIRO Data61, Clayton, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0001-8938-2364","affiliations":[{"raw_affiliation_string":"CSIRO Data61, Clayton, VIC, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064553444","display_name":"Xingliang Yuan","orcid":"https://orcid.org/0000-0002-3701-4946"},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xingliang Yuan","raw_affiliation_strings":["Department of Information Technology, Monash University, Clayton, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0002-3701-4946","affiliations":[{"raw_affiliation_string":"Department of Information Technology, Monash University, Clayton, VIC, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100390514","display_name":"Cong Wang","orcid":"https://orcid.org/0000-0003-0547-315X"},"institutions":[{"id":"https://openalex.org/I168719708","display_name":"City University of Hong Kong","ror":"https://ror.org/03q8dnn23","country_code":"HK","type":"education","lineage":["https://openalex.org/I168719708"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Cong Wang","raw_affiliation_strings":["Department of Computer Science, City University of Hong Kong, Hong Kong, China"],"raw_orcid":"https://orcid.org/0000-0003-0547-315X","affiliations":[{"raw_affiliation_string":"Department of Computer Science, City University of Hong Kong, Hong Kong, China","institution_ids":["https://openalex.org/I168719708"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086593836","display_name":"Carsten Rudolph","orcid":"https://orcid.org/0000-0001-9050-5675"},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Carsten Rudolph","raw_affiliation_strings":["Department of Information Technology, Monash University, Clayton, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0001-9050-5675","affiliations":[{"raw_affiliation_string":"Department of Information Technology, Monash University, Clayton, VIC, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085343027","display_name":"Xiangwen Yang","orcid":"https://orcid.org/0000-0002-4529-5776"},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xiangwen Yang","raw_affiliation_strings":["Department of Information Technology, Monash University, Clayton, VIC, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Technology, Monash University, Clayton, VIC, Australia","institution_ids":["https://openalex.org/I56590836"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.6561,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.72548129,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"20","issue":"2","first_page":"886","last_page":"901"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.9878000020980835,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9578999876976013,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8080134987831116},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7335849404335022},{"id":"https://openalex.org/keywords/differentiator","display_name":"Differentiator","score":0.6467007994651794},{"id":"https://openalex.org/keywords/transfer-of-learning","display_name":"Transfer of learning","score":0.6292132139205933},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5884175896644592},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5824692249298096},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.579108476638794},{"id":"https://openalex.org/keywords/debiasing","display_name":"Debiasing","score":0.5010991096496582},{"id":"https://openalex.org/keywords/transferability","display_name":"Transferability","score":0.4828105866909027},{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.4771299362182617},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.42947378754615784},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.35827499628067017},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.09642654657363892}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8080134987831116},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7335849404335022},{"id":"https://openalex.org/C12112733","wikidata":"https://www.wikidata.org/wiki/Q2659948","display_name":"Differentiator","level":3,"score":0.6467007994651794},{"id":"https://openalex.org/C150899416","wikidata":"https://www.wikidata.org/wiki/Q1820378","display_name":"Transfer of learning","level":2,"score":0.6292132139205933},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5884175896644592},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5824692249298096},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.579108476638794},{"id":"https://openalex.org/C2779458634","wikidata":"https://www.wikidata.org/wiki/Q24963715","display_name":"Debiasing","level":2,"score":0.5010991096496582},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.4828105866909027},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.4771299362182617},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.42947378754615784},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.35827499628067017},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.09642654657363892},{"id":"https://openalex.org/C106131492","wikidata":"https://www.wikidata.org/wiki/Q3072260","display_name":"Filter (signal processing)","level":2,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C140331021","wikidata":"https://www.wikidata.org/wiki/Q1868104","display_name":"Logit","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C188147891","wikidata":"https://www.wikidata.org/wiki/Q147638","display_name":"Cognitive science","level":1,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2022.3144988","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3144988","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Quality Education","id":"https://metadata.un.org/sdg/4","score":0.41999998688697815}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":50,"referenced_works":["https://openalex.org/W6908809","https://openalex.org/W2067713319","https://openalex.org/W2108598243","https://openalex.org/W2117876524","https://openalex.org/W2123469553","https://openalex.org/W2158213899","https://openalex.org/W2183341477","https://openalex.org/W2243397390","https://openalex.org/W2325939864","https://openalex.org/W2536626143","https://openalex.org/W2607219512","https://openalex.org/W2620038827","https://openalex.org/W2771622532","https://openalex.org/W2805969103","https://openalex.org/W2807363941","https://openalex.org/W2809895662","https://openalex.org/W2897865027","https://openalex.org/W2902931196","https://openalex.org/W2911510572","https://openalex.org/W2913848079","https://openalex.org/W2934843808","https://openalex.org/W2947133760","https://openalex.org/W2962933288","https://openalex.org/W2963149653","https://openalex.org/W2963626858","https://openalex.org/W2963857521","https://openalex.org/W3004589439","https://openalex.org/W3007305010","https://openalex.org/W3023265437","https://openalex.org/W3080404596","https://openalex.org/W3082558286","https://openalex.org/W3087086069","https://openalex.org/W3099264032","https://openalex.org/W3102720581","https://openalex.org/W4293846201","https://openalex.org/W6600284362","https://openalex.org/W6637373629","https://openalex.org/W6640425456","https://openalex.org/W6726275242","https://openalex.org/W6729756640","https://openalex.org/W6732814185","https://openalex.org/W6734547106","https://openalex.org/W6746383792","https://openalex.org/W6754279747","https://openalex.org/W6754762128","https://openalex.org/W6755843862","https://openalex.org/W6758458550","https://openalex.org/W6758779121","https://openalex.org/W6758975236","https://openalex.org/W6765966149"],"related_works":["https://openalex.org/W4362554880","https://openalex.org/W4386875279","https://openalex.org/W4281684980","https://openalex.org/W2171721708","https://openalex.org/W3214527415","https://openalex.org/W4287887864","https://openalex.org/W1495104519","https://openalex.org/W4390963114","https://openalex.org/W4225584739","https://openalex.org/W2199432031"],"abstract_inverted_index":{"Transfer":[0],"learning":[1,46],"is":[2,120],"prevalent":[3],"as":[4],"a":[5,20,53,70,110,135],"technique":[6],"to":[7,40,79,95,123,129,144,177],"efficiently":[8],"generate":[9],"new":[10],"models":[11,27,167],"(Student":[12],"models)":[13],"based":[14],"on":[15,155],"the":[16,60,81,97,102,117,126,165,181],"knowledge":[17],"transferred":[18],"from":[19,92,116],"pre-trained":[21],"model":[22,119],"(Teacher":[23],"model).":[24],"However,":[25],"Teacher":[26],"are":[28,175],"often":[29],"publicly":[30],"available":[31],"for":[32],"sharing":[33],"and":[34,132,158],"reuse,":[35],"which":[36,114],"inevitably":[37],"introduces":[38],"vulnerability":[39],"trigger":[41],"severe":[42],"attacks":[43,64],"against":[44],"transfer":[45,66],"systems.":[47],"In":[48],"this":[49],"article,":[50],"we":[51,108],"take":[52],"first":[54,121],"step":[55],"towards":[56],"mitigating":[57],"one":[58],"of":[59,139,171,180,188],"most":[61],"advanced":[62],"misclassification":[63],"in":[65,113],"learning.":[67],"We":[68,87],"design":[69,198],"distilled":[71],"<italic":[72],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[73],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">differentiator</i>":[74],"via":[75],"activation-based":[76],"network":[77],"pruning":[78],"enervate":[80],"attack":[82],"transferability":[83],"while":[84],"retaining":[85],"accuracy.":[86],"adopt":[88],"an":[89,185],"ensemble":[90,104],"structure":[91],"variant":[93],"differentiators":[94,128,174],"improve":[96],"defence":[98,170],"robustness.":[99],"To":[100],"avoid":[101],"bloated":[103],"size":[105],"during":[106],"inference,":[107],"propose":[109],"two-phase":[111],"defence,":[112],"inference":[115],"Student":[118,166],"performed":[122],"narrow":[124],"down":[125],"candidate":[127],"be":[130,142],"assembled,":[131],"later":[133],"only":[134,172],"small,":[136],"fixed":[137],"number":[138],"them":[140],"can":[141],"chosen":[143],"validate":[145],"clean":[146],"or":[147],"reject":[148],"adversarial":[149,182],"inputs":[150,183],"effectively.":[151],"Our":[152,192],"comprehensive":[153],"evaluations":[154],"both":[156],"large":[157],"small":[159],"image":[160],"recognition":[161],"tasks":[162],"confirm":[163],"that":[164,196],"with":[168,184],"our":[169,197],"5":[173],"immune":[176],"over":[178],"90%":[179],"accuracy":[186],"loss":[187],"less":[189],"than":[190],"10%.":[191],"comparison":[193],"also":[194],"demonstrates":[195],"outperforms":[199],"prior":[200],"problematic":[201],"defences.":[202]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":3},{"year":2020,"cited_by_count":1}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}