{"id":"https://openalex.org/W3215404543","doi":"https://doi.org/10.1109/tifs.2022.3198857","title":"TnT Attacks! Universal Naturalistic Adversarial Patches Against Deep Neural Network Systems","display_name":"TnT Attacks! Universal Naturalistic Adversarial Patches Against Deep Neural Network Systems","publication_year":2022,"publication_date":"2022-01-01","ids":{"openalex":"https://openalex.org/W3215404543","doi":"https://doi.org/10.1109/tifs.2022.3198857","mag":"3215404543"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2022.3198857","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2022.3198857","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5070336991","display_name":"Bao Gia Doan","orcid":"https://orcid.org/0000-0001-6941-2765"},"institutions":[{"id":"https://openalex.org/I5681781","display_name":"The University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Bao Gia Doan","raw_affiliation_strings":["School of Computer Science, The University of Adelaide, Adelaide, SA, Australia"],"raw_orcid":"https://orcid.org/0000-0001-6941-2765","affiliations":[{"raw_affiliation_string":"School of Computer Science, The University of Adelaide, Adelaide, SA, Australia","institution_ids":["https://openalex.org/I5681781"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009850797","display_name":"Minhui Xue","orcid":"https://orcid.org/0000-0002-9172-4252"},"institutions":[{"id":"https://openalex.org/I5681781","display_name":"The University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Minhui Xue","raw_affiliation_strings":["School of Computer Science, The University of Adelaide, Adelaide, SA, Australia"],"raw_orcid":"https://orcid.org/0000-0002-9172-4252","affiliations":[{"raw_affiliation_string":"School of Computer Science, The University of Adelaide, Adelaide, SA, Australia","institution_ids":["https://openalex.org/I5681781"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101594068","display_name":"Shiqing Ma","orcid":"https://orcid.org/0000-0003-1551-8948"},"institutions":[{"id":"https://openalex.org/I102322142","display_name":"Rutgers, The State University of New Jersey","ror":"https://ror.org/05vt9qd57","country_code":"US","type":"education","lineage":["https://openalex.org/I102322142"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shiqing Ma","raw_affiliation_strings":["Department of Computer Science, Rutgers University, New Brunswick, NJ, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Rutgers University, New Brunswick, NJ, USA","institution_ids":["https://openalex.org/I102322142"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058061726","display_name":"Ehsan Abbasnejad","orcid":null},"institutions":[{"id":"https://openalex.org/I5681781","display_name":"The University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Ehsan Abbasnejad","raw_affiliation_strings":["School of Computer Science, The University of Adelaide, Adelaide, SA, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, The University of Adelaide, Adelaide, SA, Australia","institution_ids":["https://openalex.org/I5681781"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5048703299","display_name":"Damith C. Ranasinghe","orcid":"https://orcid.org/0000-0002-2008-9255"},"institutions":[{"id":"https://openalex.org/I5681781","display_name":"The University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Damith C. Ranasinghe","raw_affiliation_strings":["School of Computer Science, The University of Adelaide, Adelaide, SA, Australia"],"raw_orcid":"https://orcid.org/0000-0002-2008-9255","affiliations":[{"raw_affiliation_string":"School of Computer Science, The University of Adelaide, Adelaide, SA, Australia","institution_ids":["https://openalex.org/I5681781"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.9229,"has_fulltext":false,"cited_by_count":57,"citation_normalized_percentile":{"value":0.96731704,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":"17","issue":null,"first_page":"3816","last_page":"3830"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9704999923706055,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9646000266075134,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8380370736122131},{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.7899448871612549},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7792840003967285},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.6611533164978027},{"id":"https://openalex.org/keywords/bounded-function","display_name":"Bounded function","score":0.5551425218582153},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.554774820804596},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.554498016834259},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.5073015093803406},{"id":"https://openalex.org/keywords/trojan","display_name":"Trojan","score":0.4818059802055359},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.4546632170677185},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.38172000646591187},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3621874451637268},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.34443140029907227},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.11673399806022644}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8380370736122131},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.7899448871612549},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7792840003967285},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.6611533164978027},{"id":"https://openalex.org/C34388435","wikidata":"https://www.wikidata.org/wiki/Q2267362","display_name":"Bounded function","level":2,"score":0.5551425218582153},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.554774820804596},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.554498016834259},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.5073015093803406},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.4818059802055359},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4546632170677185},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.38172000646591187},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3621874451637268},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.34443140029907227},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.11673399806022644},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2022.3198857","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2022.3198857","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7900000214576721,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":89,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W1677182931","https://openalex.org/W2067713319","https://openalex.org/W2099471712","https://openalex.org/W2117539524","https://openalex.org/W2119112357","https://openalex.org/W2145287260","https://openalex.org/W2158213899","https://openalex.org/W2325939864","https://openalex.org/W2326925005","https://openalex.org/W2408141691","https://openalex.org/W2461943168","https://openalex.org/W2535873859","https://openalex.org/W2543927648","https://openalex.org/W2603766943","https://openalex.org/W2734506812","https://openalex.org/W2748789698","https://openalex.org/W2752517284","https://openalex.org/W2753783305","https://openalex.org/W2774423163","https://openalex.org/W2781800156","https://openalex.org/W2783555701","https://openalex.org/W2798302089","https://openalex.org/W2803850896","https://openalex.org/W2902867332","https://openalex.org/W2905423756","https://openalex.org/W2910992787","https://openalex.org/W2911634294","https://openalex.org/W2932026309","https://openalex.org/W2934843808","https://openalex.org/W2962835968","https://openalex.org/W2962846186","https://openalex.org/W2962879692","https://openalex.org/W2963207607","https://openalex.org/W2963302614","https://openalex.org/W2963448658","https://openalex.org/W2963542245","https://openalex.org/W2963557656","https://openalex.org/W2963564844","https://openalex.org/W2963857521","https://openalex.org/W2964137095","https://openalex.org/W2964253222","https://openalex.org/W2964318098","https://openalex.org/W2970971581","https://openalex.org/W2981597369","https://openalex.org/W2996629283","https://openalex.org/W3022179901","https://openalex.org/W3034796035","https://openalex.org/W3036426855","https://openalex.org/W3081488247","https://openalex.org/W3101294892","https://openalex.org/W3102748184","https://openalex.org/W3103340107","https://openalex.org/W3114686421","https://openalex.org/W3125713917","https://openalex.org/W3128390792","https://openalex.org/W3157207381","https://openalex.org/W3177096435","https://openalex.org/W3187541268","https://openalex.org/W3195462295","https://openalex.org/W3204155906","https://openalex.org/W3205672068","https://openalex.org/W6637162671","https://openalex.org/W6637373629","https://openalex.org/W6640425456","https://openalex.org/W6714069269","https://openalex.org/W6735913928","https://openalex.org/W6739868092","https://openalex.org/W6740552771","https://openalex.org/W6741036071","https://openalex.org/W6743581629","https://openalex.org/W6745847742","https://openalex.org/W6746897123","https://openalex.org/W6747473890","https://openalex.org/W6747706139","https://openalex.org/W6751278434","https://openalex.org/W6756943956","https://openalex.org/W6758132781","https://openalex.org/W6758684365","https://openalex.org/W6766978945","https://openalex.org/W6767506513","https://openalex.org/W6767996094","https://openalex.org/W6771683604","https://openalex.org/W6772291365","https://openalex.org/W6774113373","https://openalex.org/W6774549192","https://openalex.org/W6776469819","https://openalex.org/W6777991474","https://openalex.org/W6784545786"],"related_works":["https://openalex.org/W3106646114","https://openalex.org/W4308244459","https://openalex.org/W4221166349","https://openalex.org/W4226092343","https://openalex.org/W4200628936","https://openalex.org/W4391093411","https://openalex.org/W4389518867","https://openalex.org/W4225678119","https://openalex.org/W2969023901","https://openalex.org/W4320018150"],"abstract_inverted_index":{"Deep":[0],"neural":[1,271],"networks":[2,272],"(DNNs),":[3],"regardless":[4],"of":[5,26,33,37,55,143,218,231,238,258],"their":[6],"impressive":[7],"performance,":[8],"are":[9],"vulnerable":[10],"to":[11,20,122,138,146,158,161,169,178,185,241,261],"attacks":[12],"from":[13,226],"adversarial":[14,42,46,59,69,132],"inputs":[15],"and,":[16],"more":[17],"recently,":[18],"Trojans":[19],"misguide":[21,112],"or":[22,117],"hijack":[23],"the":[24,27,31,52,56,63,108,120,136,181,190,200,207,223,229,232,239,256,259],"decision":[25,126],"model.":[28],"We":[29,234],"expose":[30],"existence":[32],"an":[34,72,131],"intriguing":[35],"class":[36],"spatially":[38,57],"bounded,":[39],"physically":[40,85],"realizable,":[41,86],"examples\u2014":[43],"Universal":[44],"NaTuralistic":[45],"paTches\u2014we":[47],"call":[48],"TnTs,":[49],"by":[50],"exploring":[51],"super":[53],"set":[54,217],"bounded":[58],"example":[60],"space":[61,66],"and":[62,93,228,267,277],"natural":[64],"input":[65,101],"within":[67],"generative":[68],"networks.":[70],"Now,":[71],"adversary":[73],"can":[74],"arm":[75],"themselves":[76],"with":[77,104,173,180],"a":[78,105,113,124,140,148,154,187,196,236],"patch":[79,133,152,197],"that":[80],"is":[81,97,165],"naturalistic,":[82],"less":[83],"malicious-looking,":[84],"highly":[87],"effective\u2014achieving":[88],"high":[89],"attack":[90,175,240,246,260],"success":[91,247],"rates,":[92],"universal.":[94],"A":[95],"TnT":[96,106],"universal":[98],"because":[99],"any":[100],"image":[102],"captured":[103],"in":[107,156,199],"scene":[109],"will:":[110],"i)":[111],"network":[114,121],"(untargeted":[115],"attack);":[116],"ii)":[118],"force":[119],"make":[123],"malicious":[125],"(targeted":[127],"attack).":[128],"Interestingly,":[129],"now,":[130],"attacker":[134],"has":[135],"potential":[137],"exert":[139],"greater":[141],"level":[142],"control\u2014the":[144],"ability":[145,164],"choose":[147],"location":[149],"independent,":[150],"natural-looking":[151],"as":[153,274],"trigger":[155],"contrast":[157],"being":[159],"constrained":[160],"noisy":[162],"perturbations\u2014an":[163],"thus":[166],"far":[167],"shown":[168],"be":[170],"only":[171],"possible":[172],"Trojan":[174],"methods":[176],"needing":[177],"interfere":[179],"model":[182],"building":[183],"processes":[184],"embed":[186],"backdoor":[188],"at":[189],"risk":[191],"discovery;":[192],"but,":[193],"still":[194],"realize":[195],"deployable":[198],"physical":[201],"world.":[202],"Through":[203],"extensive":[204],"experiments":[205],"on":[206],"large-scale":[208],"visual":[209,263],"classification":[210,264],"task,ImageNetwith":[211],"evaluations":[212],"across":[213],"its":[214],"entire":[215],"validation":[216],"50,000":[219],"images,":[220],"we":[221],"demonstrate":[222],"realistic":[224],"threat":[225],"TnTs":[227],"robustness":[230],"attack.":[233],"show":[235,255],"generalization":[237],"create":[242],"patches":[243],"achieving":[244],"higher":[245],"rates":[248],"than":[249],"existing":[250],"state-of-the-art":[251,269],"methods.":[252],"Our":[253],"results":[254],"generalizability":[257],"different":[262],"tasks":[265],"(CIFAR-10,GTSRB,PubFig)":[266],"multiple":[268],"deep":[270],"such":[273],"WideResnet50,":[275],"Inception-V3":[276],"VGG-16.":[278]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":16},{"year":2024,"cited_by_count":21},{"year":2023,"cited_by_count":13},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}