{"id":"https://openalex.org/W4226394973","doi":"https://doi.org/10.1109/tdsc.2022.3164073","title":"Stealthy and Flexible Trojan in Deep Learning Framework","display_name":"Stealthy and Flexible Trojan in Deep Learning Framework","publication_year":2022,"publication_date":"2022-04-01","ids":{"openalex":"https://openalex.org/W4226394973","doi":"https://doi.org/10.1109/tdsc.2022.3164073"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2022.3164073","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3164073","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100455413","display_name":"Yajie Wang","orcid":"https://orcid.org/0000-0002-0962-4464"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yajie Wang","raw_affiliation_strings":["School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-0962-4464","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075512625","display_name":"Kongyang Chen","orcid":"https://orcid.org/0000-0003-2439-3518"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kongyang Chen","raw_affiliation_strings":["Institute of Artificial Intelligence and Blockchain, Guangzhou University, Guangzhou, China","Pazhou Lab, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-2439-3518","affiliations":[{"raw_affiliation_string":"Institute of Artificial Intelligence and Blockchain, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]},{"raw_affiliation_string":"Pazhou Lab, Guangzhou, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003198271","display_name":"Yu\u2010an Tan","orcid":"https://orcid.org/0000-0001-6404-8853"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu-an Tan","raw_affiliation_strings":["School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-6404-8853","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070424852","display_name":"Shuxin Huang","orcid":"https://orcid.org/0000-0002-0634-4870"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuxin Huang","raw_affiliation_strings":["School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074461054","display_name":"Wencong Ma","orcid":null},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wencong Ma","raw_affiliation_strings":["School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5026287089","display_name":"Yuanzhang Li","orcid":"https://orcid.org/0000-0002-1931-366X"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuanzhang Li","raw_affiliation_strings":["School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-1931-366X","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.5561,"has_fulltext":false,"cited_by_count":23,"citation_normalized_percentile":{"value":0.90520768,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"20","issue":"3","first_page":"1789","last_page":"1798"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9926999807357788,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9868999719619751,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9993389844894409},{"id":"https://openalex.org/keywords/trojan","display_name":"Trojan","score":0.8596142530441284},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7603808641433716},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6642074584960938},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.6583224534988403},{"id":"https://openalex.org/keywords/flexibility","display_name":"Flexibility (engineering)","score":0.5413759350776672},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5166990756988525},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.39527666568756104}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9993389844894409},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.8596142530441284},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7603808641433716},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6642074584960938},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.6583224534988403},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.5413759350776672},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5166990756988525},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.39527666568756104},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2022.3164073","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3164073","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3814875541","display_name":null,"funder_award_id":"U1936218","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6245648641","display_name":null,"funder_award_id":"61\u2009802\u2009383","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6454313764","display_name":null,"funder_award_id":"62072037","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7580715247","display_name":null,"funder_award_id":"61876019","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":78,"referenced_works":["https://openalex.org/W1552056088","https://openalex.org/W1673923490","https://openalex.org/W1782590233","https://openalex.org/W1995562189","https://openalex.org/W2108598243","https://openalex.org/W2113459411","https://openalex.org/W2119112357","https://openalex.org/W2143612262","https://openalex.org/W2144354855","https://openalex.org/W2194775991","https://openalex.org/W2293768274","https://openalex.org/W2296452361","https://openalex.org/W2570685808","https://openalex.org/W2748789698","https://openalex.org/W2753783305","https://openalex.org/W2774423163","https://openalex.org/W2798302089","https://openalex.org/W2799244840","https://openalex.org/W2807363941","https://openalex.org/W2896457183","https://openalex.org/W2934843808","https://openalex.org/W2953384591","https://openalex.org/W2962700793","https://openalex.org/W2963163009","https://openalex.org/W2963327228","https://openalex.org/W2963446712","https://openalex.org/W2966689772","https://openalex.org/W2969985801","https://openalex.org/W2982977353","https://openalex.org/W2990270730","https://openalex.org/W2996800219","https://openalex.org/W2999321020","https://openalex.org/W3007358161","https://openalex.org/W3023868144","https://openalex.org/W3034258347","https://openalex.org/W3034579202","https://openalex.org/W3047587361","https://openalex.org/W3074128044","https://openalex.org/W3083185154","https://openalex.org/W3090898103","https://openalex.org/W3098772125","https://openalex.org/W3100405174","https://openalex.org/W3107337211","https://openalex.org/W3113332968","https://openalex.org/W3118608800","https://openalex.org/W3121523901","https://openalex.org/W3162804012","https://openalex.org/W3180545700","https://openalex.org/W3190075653","https://openalex.org/W3195462295","https://openalex.org/W3196546979","https://openalex.org/W3198262235","https://openalex.org/W3200805806","https://openalex.org/W3202935128","https://openalex.org/W4214537185","https://openalex.org/W4252979261","https://openalex.org/W4294679663","https://openalex.org/W4295312788","https://openalex.org/W4300250944","https://openalex.org/W6637162671","https://openalex.org/W6638046521","https://openalex.org/W6676984168","https://openalex.org/W6700903540","https://openalex.org/W6713134421","https://openalex.org/W6731927902","https://openalex.org/W6743581629","https://openalex.org/W6743986261","https://openalex.org/W6746897123","https://openalex.org/W6755207826","https://openalex.org/W6766978945","https://openalex.org/W6770046844","https://openalex.org/W6771747359","https://openalex.org/W6774177702","https://openalex.org/W6774904085","https://openalex.org/W6776469819","https://openalex.org/W6780292011","https://openalex.org/W6780735040","https://openalex.org/W6787972765"],"related_works":["https://openalex.org/W3106646114","https://openalex.org/W4308244459","https://openalex.org/W4221166349","https://openalex.org/W4226092343","https://openalex.org/W4200628936","https://openalex.org/W4391093411","https://openalex.org/W4389518867","https://openalex.org/W4225678119","https://openalex.org/W2969023901","https://openalex.org/W4328053081"],"abstract_inverted_index":{"Deep":[0],"neural":[1],"networks":[2],"(DNNs)":[3],"are":[4,239],"increasingly":[5],"used":[6],"as":[7],"the":[8,35,54,84,88,106,112,135,139,150,172,217,223,251],"critical":[9],"component":[10],"of":[11,87,120],"applications,":[12],"bringing":[13],"high":[14],"computational":[15],"costs.":[16],"Many":[17],"practitioners":[18],"host":[19],"their":[20],"models":[21],"on":[22,96,105,180],"third-party":[23,61],"platforms.":[24,63],"This":[25],"practice":[26],"exposes":[27],"DNNs":[28],"to":[29,44,52,196,201,255],"risks:":[30],"A":[31],"third":[32],"party":[33],"hosting":[34,62],"model":[36,128,136,202],"may":[37],"use":[38],"a":[39,46,66,101,117,154,191,226],"malicious":[40],"deep":[41,89],"learning":[42,90],"framework":[43,224],"implement":[45],"backdoor":[47,58,71,93,110,159,228,248],"attack.":[48],"Our":[49,244],"goal":[50],"is":[51,74,100,116,127,143],"develop":[53],"realistic":[55],"potential":[56],"for":[57,153],"attacks":[59,94,249],"in":[60,167,222,250],"We":[64,79],"introduce":[65],"threatening":[67],"and":[68,77,130,232],"realistically":[69],"implementable":[70],"attack":[72,126,189,229],"that":[73,144,168,187,236,247],"highly":[75],"stealthy":[76,142],"flexible.":[78],"inject":[80,207],"trojans":[81,146,209,220],"by":[82],"hijacking":[83],"built-in":[85],"functions":[86],"framework.":[91],"Existing":[92],"rely":[95],"poisoning;":[97],"its":[98],"trigger":[99,115],"special":[102],"pattern":[103],"superimposed":[104],"input.":[107],"Unlike":[108],"existing":[109,158],"attacks,":[111],"proposed":[113],"sequential":[114],"specific":[118],"sequence":[119],"clean":[121,155],"image":[122],"sets.":[123],"Moreover,":[124],"our":[125,188,242],"agnostic":[129],"does":[131],"not":[132,148,212],"require":[133],"retraining":[134],"or":[137],"modifying":[138],"parameters.":[140],"Its":[141,164],"injecting":[145],"will":[147],"change":[149],"model\u2019s":[151],"prediction":[152],"image,":[156],"so":[157],"defenses":[160,238],"cannot":[161],"detect":[162],"it.":[163],"flexibility":[165],"lies":[166],"adversary":[169],"can":[170,206],"remodify":[171],"trojan":[173],"behavior":[174],"at":[175,216],"any":[176],"time.":[177],"Extensive":[178],"experiments":[179,233],"multiple":[181,208],"benchmarks":[182],"with":[183,198],"different":[184],"frameworks":[185],"demonstrate":[186],"achieves":[190],"perfect":[192],"success":[193],"rate":[194],"(up":[195],"100%)":[197],"minimal":[199],"damage":[200],"performance.":[203],"And":[204],"we":[205],"which":[210],"do":[211],"affect":[213],"each":[214],"other":[215],"same":[218],"time,":[219],"hidden":[221],"make":[225],"universal":[227],"possible.":[230],"Analysis":[231],"further":[234],"show":[235],"state-of-the-art":[237],"ineffective":[240],"against":[241],"attacks.":[243],"work":[245],"suggests":[246],"supply":[252],"chain":[253],"need":[254],"be":[256],"urgently":[257],"explored.":[258]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":9}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}