{"id":"https://openalex.org/W7131071374","doi":"https://doi.org/10.1109/tdsc.2026.3666979","title":"Typhon Unleashed: Practical Adversarial Weight Attacks Against On-Device Deep Learning Models","display_name":"Typhon Unleashed: Practical Adversarial Weight Attacks Against On-Device Deep Learning Models","publication_year":2026,"publication_date":"2026-02-23","ids":{"openalex":"https://openalex.org/W7131071374","doi":"https://doi.org/10.1109/tdsc.2026.3666979"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2026.3666979","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3666979","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5015539236","display_name":"Yujin Huang","orcid":"https://orcid.org/0000-0003-2281-2504"},"institutions":[{"id":"https://openalex.org/I165779595","display_name":"The University of Melbourne","ror":"https://ror.org/01ej9dk98","country_code":"AU","type":"education","lineage":["https://openalex.org/I165779595"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yujin Huang","raw_affiliation_strings":["School of Computing and Information Systems, The University of Melbourne, Melbourne, Australia"],"raw_orcid":"https://orcid.org/0000-0003-2281-2504","affiliations":[{"raw_affiliation_string":"School of Computing and Information Systems, The University of Melbourne, Melbourne, Australia","institution_ids":["https://openalex.org/I165779595"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126591140","display_name":"Xingliang Yuan","orcid":null},"institutions":[{"id":"https://openalex.org/I165779595","display_name":"The University of Melbourne","ror":"https://ror.org/01ej9dk98","country_code":"AU","type":"education","lineage":["https://openalex.org/I165779595"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xingliang Yuan","raw_affiliation_strings":["School of Computing and Information Systems, The University of Melbourne, Melbourne, Australia"],"raw_orcid":"https://orcid.org/0000-0002-3701-4946","affiliations":[{"raw_affiliation_string":"School of Computing and Information Systems, The University of Melbourne, Melbourne, Australia","institution_ids":["https://openalex.org/I165779595"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075639297","display_name":"Chunyang Chen","orcid":"https://orcid.org/0000-0003-2011-9618"},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Chunyang Chen","raw_affiliation_strings":["Department of Computer Science, Technical University of Munich, München, Germany"],"raw_orcid":"https://orcid.org/0000-0003-2011-9618","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Technical University of Munich, München, Germany","institution_ids":["https://openalex.org/I62916508"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5086844518","display_name":"Seong Oun Hwang","orcid":"https://orcid.org/0000-0003-4240-6255"},"institutions":[{"id":"https://openalex.org/I12832649","display_name":"Gachon University","ror":"https://ror.org/03ryywt80","country_code":"KR","type":"education","lineage":["https://openalex.org/I12832649"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Seong Oun Hwang","raw_affiliation_strings":["Department of Computer Engineering, Gachon University, Seongnam, South Korea"],"raw_orcid":"https://orcid.org/0000-0003-4240-6255","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Gachon University, Seongnam, South Korea","institution_ids":["https://openalex.org/I12832649"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.178243,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"3","first_page":"6584","last_page":"6601"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9765999913215637,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9765999913215637,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.00800000037997961,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.002400000113993883,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7944999933242798},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.7526000142097473},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.5034999847412109},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.4887000024318695},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.44429999589920044},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"Adversarial machine learning","score":0.43970000743865967}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8446000218391418},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7944999933242798},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.7526000142097473},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.680899977684021},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.5034999847412109},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.49540001153945923},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.4887000024318695},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.44429999589920044},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.43970000743865967},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.43959999084472656},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.38760000467300415},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.34040001034736633},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.32749998569488525},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.3075000047683716},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.305400013923645},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.25839999318122864},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.2533999979496002}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2026.3666979","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3666979","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.41948220133781433,"id":"https://metadata.un.org/sdg/5","display_name":"Gender equality"}],"awards":[{"id":"https://openalex.org/G4402263012","display_name":null,"funder_award_id":"RS-2024-00340882","funder_id":"https://openalex.org/F4320328359","funder_display_name":"Ministry of Science and ICT, South Korea"}],"funders":[{"id":"https://openalex.org/F4320322120","display_name":"National Research Foundation of Korea","ror":"https://ror.org/013aysd81"},{"id":"https://openalex.org/F4320328359","display_name":"Ministry of Science and ICT, South Korea","ror":"https://ror.org/01wpjm123"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W2001610032","https://openalex.org/W2117876524","https://openalex.org/W2183341477","https://openalex.org/W2251939518","https://openalex.org/W2537189671","https://openalex.org/W2610305199","https://openalex.org/W2753783305","https://openalex.org/W2808423829","https://openalex.org/W2903650079","https://openalex.org/W2919115771","https://openalex.org/W2942091739","https://openalex.org/W2954996726","https://openalex.org/W2963163009","https://openalex.org/W2969546126","https://openalex.org/W2981207549","https://openalex.org/W2981744998","https://openalex.org/W3010216907","https://openalex.org/W3012470135","https://openalex.org/W3034457371","https://openalex.org/W3034579202","https://openalex.org/W3110643640","https://openalex.org/W3121099749","https://openalex.org/W3132455321","https://openalex.org/W3163168187","https://openalex.org/W3163672235","https://openalex.org/W3199792160","https://openalex.org/W3204619801","https://openalex.org/W4214737857","https://openalex.org/W4224925642","https://openalex.org/W4242053016","https://openalex.org/W4283697320","https://openalex.org/W4284693098","https://openalex.org/W4296596384","https://openalex.org/W4312233756","https://openalex.org/W4312933868","https://openalex.org/W4385570204","https://openalex.org/W4391558440","https://openalex.org/W4408565829","https://openalex.org/W4409221125","https://openalex.org/W7133216773"],"related_works":[],"abstract_inverted_index":{"On-device":[0],"deep":[1],"learning":[2],"(DL)":[3],"has":[4],"emerged":[5],"as":[6],"a":[7,48],"popular":[8],"approach":[9,39],"for":[10],"mobile":[11],"apps":[12],"to":[13,60,130],"deliver":[14],"artificial":[15],"intelligence":[16],"services.":[17],"Unlike":[18],"traditional":[19],"cloud-based":[20],"approaches,":[21],"it":[22],"processes":[23],"sensitive":[24,31],"information":[25],"locally,":[26],"addressing":[27],"severe":[28],"concerns":[29],"over":[30],"data":[32],"collection":[33],"on":[34,43],"cloud":[35],"servers.":[36],"However,":[37],"this":[38,80,96],"inevitably":[40],"stores":[41],"models":[42,59,114,129],"user":[44],"devices":[45],"and":[46,121,134,144],"opens":[47],"new":[49],"attack":[50,89,104,152,167],"surface,":[51],"i.e.,":[52],"adversarial":[53,87],"weight":[54,66,88],"attacks,":[55],"which":[56],"steer":[57],"DL":[58,74,92,113,128],"undesirable":[61],"behaviors":[62],"through":[63,115],"direct":[64],"model":[65,136,145],"modification.":[67],"Unfortunately,":[68],"such":[69],"risks":[70],"stemming":[71],"from":[72],"on-device":[73,91,112,127],"have":[75],"been":[76],"left":[77],"unexplored.":[78],"In":[79,157],"paper,":[81],"we":[82,99],"present":[83],"the":[84,108,116,123,148,171],"first":[85],"practical":[86],"against":[90],"models.":[93],"To":[94],"demonstrate":[95],"novel":[97],"attack,":[98],"propose":[100],"TYPHON,":[101],"an":[102],"automated":[103],"system":[105],"that":[106],"removes":[107],"read-only":[109],"restriction":[110],"of":[111,118,126,150,173],"reconstruction":[117],"writable":[119],"counterparts":[120],"leverages":[122],"inference-only":[124],"nature":[125],"solve":[131],"malicious":[132],"parameters":[133],"manipulate":[135],"behaviors.":[137],"Extensive":[138],"experimental":[139],"results":[140],"across":[141,153],"diverse":[142],"datasets":[143],"architectures":[146],"confirm":[147],"superiority":[149],"our":[151],"multiple":[154],"evaluation":[155],"metrics.":[156],"addition,":[158],"three":[159],"real-world":[160],"case":[161],"studies":[162],"are":[163],"conducted":[164],"with":[165],"100%":[166],"success":[168],"rates,":[169],"demonstrating":[170],"practicality":[172],"TYPHON.":[174]},"counts_by_year":[],"updated_date":"2026-05-15T06:05:50.897203","created_date":"2026-02-24T00:00:00"}