{"id":"https://openalex.org/W4403722520","doi":"https://doi.org/10.1109/tmc.2024.3486218","title":"Model Poisoning Attack Against Neural Network Interpreters in IoT Devices","display_name":"Model Poisoning Attack Against Neural Network Interpreters in IoT Devices","publication_year":2024,"publication_date":"2024-10-24","ids":{"openalex":"https://openalex.org/W4403722520","doi":"https://doi.org/10.1109/tmc.2024.3486218"},"language":"en","primary_location":{"id":"doi:10.1109/tmc.2024.3486218","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tmc.2024.3486218","pdf_url":null,"source":{"id":"https://openalex.org/S69141925","display_name":"IEEE Transactions on Mobile Computing","issn_l":"1536-1233","issn":["1536-1233","1558-0660","2161-9875"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Mobile Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101485671","display_name":"Xianglong Zhang","orcid":"https://orcid.org/0000-0001-7939-6279"},"institutions":[{"id":"https://openalex.org/I80143920","display_name":"Shandong University of Science and Technology","ror":"https://ror.org/04gtjhw98","country_code":"CN","type":"education","lineage":["https://openalex.org/I80143920"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xianglong Zhang","raw_affiliation_strings":["School of Computer Science and Technology, Shandong University, Jinan, China","School of Computer Science and Technology, Shandong University, China"],"raw_orcid":"https://orcid.org/0000-0001-7939-6279","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Shandong University, Jinan, China","institution_ids":["https://openalex.org/I80143920"]},{"raw_affiliation_string":"School of Computer Science and Technology, Shandong University, China","institution_ids":["https://openalex.org/I80143920"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019839230","display_name":"Feng Li","orcid":"https://orcid.org/0000-0002-3746-2132"},"institutions":[{"id":"https://openalex.org/I80143920","display_name":"Shandong University of Science and Technology","ror":"https://ror.org/04gtjhw98","country_code":"CN","type":"education","lineage":["https://openalex.org/I80143920"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Feng Li","raw_affiliation_strings":["School of Computer Science and Technology, Shandong University, Jinan, China","School of Computer Science and Technology, Shandong University, China"],"raw_orcid":"https://orcid.org/0000-0002-3746-2132","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Shandong University, Jinan, China","institution_ids":["https://openalex.org/I80143920"]},{"raw_affiliation_string":"School of Computer Science and Technology, Shandong University, China","institution_ids":["https://openalex.org/I80143920"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033390700","display_name":"Huanle Zhang","orcid":"https://orcid.org/0000-0002-3928-7753"},"institutions":[{"id":"https://openalex.org/I80143920","display_name":"Shandong University of Science and Technology","ror":"https://ror.org/04gtjhw98","country_code":"CN","type":"education","lineage":["https://openalex.org/I80143920"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Huanle Zhang","raw_affiliation_strings":["School of Computer Science and Technology, Shandong University, Jinan, China","School of Computer Science and Technology, Shandong University, China"],"raw_orcid":"https://orcid.org/0000-0002-3928-7753","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Shandong University, Jinan, China","institution_ids":["https://openalex.org/I80143920"]},{"raw_affiliation_string":"School of Computer Science and Technology, Shandong University, China","institution_ids":["https://openalex.org/I80143920"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102973177","display_name":"Haoxin Zhang","orcid":"https://orcid.org/0009-0002-1468-7539"},"institutions":[{"id":"https://openalex.org/I80143920","display_name":"Shandong University of Science and Technology","ror":"https://ror.org/04gtjhw98","country_code":"CN","type":"education","lineage":["https://openalex.org/I80143920"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haoxin Zhang","raw_affiliation_strings":["School of Computer Science and Technology, Shandong University, Jinan, China","School of Computer Science and Technology, Shandong University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Shandong University, Jinan, China","institution_ids":["https://openalex.org/I80143920"]},{"raw_affiliation_string":"School of Computer Science and Technology, Shandong University, China","institution_ids":["https://openalex.org/I80143920"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101038838","display_name":"Zhijian Huang","orcid":"https://orcid.org/0009-0007-0403-3116"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhijian Huang","raw_affiliation_strings":["National Key Laboratory of Science and Technology on Information System Security, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0007-0403-3116","affiliations":[{"raw_affiliation_string":"National Key Laboratory of Science and Technology on Information System Security, Beijing, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037957923","display_name":"Lisheng Fan","orcid":"https://orcid.org/0000-0002-9783-1366"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lisheng Fan","raw_affiliation_strings":["School of Computer Science and Cyber Engineering, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-9783-1366","affiliations":[{"raw_affiliation_string":"School of Computer Science and Cyber Engineering, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100692488","display_name":"Xiuzhen Cheng","orcid":"https://orcid.org/0000-0001-5912-4647"},"institutions":[{"id":"https://openalex.org/I80143920","display_name":"Shandong University of Science and Technology","ror":"https://ror.org/04gtjhw98","country_code":"CN","type":"education","lineage":["https://openalex.org/I80143920"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiuzhen Cheng","raw_affiliation_strings":["School of Computer Science and Technology, Shandong University, Jinan, China","School of Computer Science and Technology, Shandong University, China"],"raw_orcid":"https://orcid.org/0000-0001-5912-4647","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Shandong University, Jinan, China","institution_ids":["https://openalex.org/I80143920"]},{"raw_affiliation_string":"School of Computer Science and Technology, Shandong University, China","institution_ids":["https://openalex.org/I80143920"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100703619","display_name":"Pengfei Hu","orcid":"https://orcid.org/0000-0002-7935-886X"},"institutions":[{"id":"https://openalex.org/I80143920","display_name":"Shandong University of Science and Technology","ror":"https://ror.org/04gtjhw98","country_code":"CN","type":"education","lineage":["https://openalex.org/I80143920"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Pengfei Hu","raw_affiliation_strings":["School of Computer Science and Technology, Shandong University, Jinan, China","School of Computer Science and Technology, Shandong University, China"],"raw_orcid":"https://orcid.org/0000-0002-7935-886X","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Shandong University, Jinan, China","institution_ids":["https://openalex.org/I80143920"]},{"raw_affiliation_string":"School of Computer Science and Technology, Shandong University, China","institution_ids":["https://openalex.org/I80143920"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":8,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.2219,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.83330426,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":"24","issue":"3","first_page":"1715","last_page":"1730"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10320","display_name":"Neural Networks and Applications","score":0.8427000045776367,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10320","display_name":"Neural Networks and Applications","score":0.8427000045776367,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14470","display_name":"Advanced Data Processing Techniques","score":0.8420000076293945,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.8335000276565552,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8285204172134399},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.611596941947937},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5815799832344055},{"id":"https://openalex.org/keywords/interpreter","display_name":"Interpreter","score":0.4705657660961151},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.4408331513404846},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4400051236152649},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.31439435482025146},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.15173640847206116}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8285204172134399},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.611596941947937},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5815799832344055},{"id":"https://openalex.org/C122783720","wikidata":"https://www.wikidata.org/wiki/Q183065","display_name":"Interpreter","level":2,"score":0.4705657660961151},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.4408331513404846},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4400051236152649},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.31439435482025146},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.15173640847206116}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tmc.2024.3486218","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tmc.2024.3486218","pdf_url":null,"source":{"id":"https://openalex.org/S69141925","display_name":"IEEE Transactions on Mobile Computing","issn_l":"1536-1233","issn":["1536-1233","1558-0660","2161-9875"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Mobile Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1423280369","display_name":"\u9762\u5411\u667a\u6167\u8fb9\u7f18\u7684\u81ea\u9002\u5e94\u6570\u636e\u4f17\u5305\u3001\u53bb\u4e2d\u5fc3\u5316\u5b66\u4e60\u53ca\u5176\u9690\u79c1\u4fdd\u62a4\u673a\u5236\u7814\u7a76","funder_award_id":"62072278","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G1479536537","display_name":null,"funder_award_id":"ZR2022LZH010","funder_id":"https://openalex.org/F4320324174","funder_display_name":"Natural Science Foundation of Shandong Province"},{"id":"https://openalex.org/G4959332381","display_name":null,"funder_award_id":"62202276","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G514600894","display_name":null,"funder_award_id":"U23A20273","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5548192873","display_name":null,"funder_award_id":"U23A20332","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6620259179","display_name":null,"funder_award_id":"62302265","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7861674258","display_name":null,"funder_award_id":"ZR2023QF172","funder_id":"https://openalex.org/F4320324174","funder_display_name":"Natural Science Foundation of Shandong Province"},{"id":"https://openalex.org/G8888926481","display_name":null,"funder_award_id":"62422208","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8942805157","display_name":null,"funder_award_id":"62232010","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320324174","display_name":"Natural Science Foundation of Shandong Province","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":50,"referenced_works":["https://openalex.org/W2095350947","https://openalex.org/W2155904486","https://openalex.org/W2194775991","https://openalex.org/W2581082771","https://openalex.org/W2618530766","https://openalex.org/W2753783305","https://openalex.org/W2765793020","https://openalex.org/W2796096336","https://openalex.org/W2807363941","https://openalex.org/W2892908011","https://openalex.org/W2897865027","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W2958089299","https://openalex.org/W2962843949","https://openalex.org/W2962858109","https://openalex.org/W2963446712","https://openalex.org/W2981485575","https://openalex.org/W2990270730","https://openalex.org/W2996800219","https://openalex.org/W3010219363","https://openalex.org/W3042795548","https://openalex.org/W3081178496","https://openalex.org/W3083185154","https://openalex.org/W3106646114","https://openalex.org/W3152758407","https://openalex.org/W3170720090","https://openalex.org/W3174908416","https://openalex.org/W3210065386","https://openalex.org/W3212213895","https://openalex.org/W4285233920","https://openalex.org/W4285307629","https://openalex.org/W4306179629","https://openalex.org/W4312568915","https://openalex.org/W4312873392","https://openalex.org/W4365421095","https://openalex.org/W4378195097","https://openalex.org/W4385080308","https://openalex.org/W4388819705","https://openalex.org/W4399123787","https://openalex.org/W6676885637","https://openalex.org/W6685133223","https://openalex.org/W6720589678","https://openalex.org/W6734194636","https://openalex.org/W6756943956","https://openalex.org/W6758853676","https://openalex.org/W6764249507","https://openalex.org/W6766931891","https://openalex.org/W6779739866","https://openalex.org/W6787959460"],"related_works":["https://openalex.org/W1721418433","https://openalex.org/W2463512549","https://openalex.org/W3089412887","https://openalex.org/W2246915267","https://openalex.org/W2004305899","https://openalex.org/W1844878253","https://openalex.org/W2611574984","https://openalex.org/W2548985027","https://openalex.org/W2412406728","https://openalex.org/W4380149490"],"abstract_inverted_index":{"Neural":[0],"network":[1],"models":[2,29],"have":[3],"become":[4],"integral":[5],"to":[6,18,47,56,65,113,138,172],"Internet":[7],"of":[8,27,52,97],"Things":[9],"(IoT)":[10],"systems,":[11],"with":[12,77,142],"applications":[13],"spanning":[14],"from":[15,151],"industrial":[16],"automation":[17],"critical":[19],"infrastructure":[20],"management.":[21],"Despite":[22],"their":[23],"prevalence,":[24],"the":[25,49,71,91,103,115,120,135,152,173,180],"deployment":[26],"these":[28],"within":[30],"IoT":[31,88,98],"systems":[32],"introduces":[33],"distinctive":[34],"security":[35],"vulnerabilities.":[36],"In":[37],"particular,":[38],"adversaries":[39],"may":[40],"execute":[41],"model":[42,60,105,175],"poisoning":[43,61,106],"attacks,":[44],"which":[45],"aim":[46],"alter":[48],"decision-making":[50],"processes":[51],"embedded":[53],"models,":[54],"leading":[55],"erroneous":[57],"outcomes.":[58],"Existing":[59],"attacks":[62,85],"necessitate":[63],"access":[64],"extensive":[66],"auxiliary":[67,111],"datasets,":[68,125],"such":[69,84],"as":[70],"training":[72],"dataset":[73],"itself":[74],"or":[75],"one":[76],"same":[78],"distribution.":[79],"These":[80],"requirements":[81],"often":[82],"render":[83],"impractical":[86],"in":[87],"contexts,":[89],"given":[90],"constrained":[92],"storage":[93],"and":[94,126],"computational":[95],"resources":[96],"devices.":[99],"This":[100],"paper":[101],"proposes":[102],"first":[104],"attack":[107,121,131],"against":[108],"interpreters":[109,137,170],"without":[110],"datasets":[112],"manipulate":[114],"model\u2019s":[116],"behavior.":[117],"We":[118],"evaluate":[119],"on":[122],"three":[123],"real-world":[124],"results":[127],"indicate":[128],"that":[129,167],"this":[130],"can":[132],"successfully":[133],"coerce":[134],"targeted":[136],"produce":[139],"outcomes":[140],"aligned":[141],"an":[143],"adversary\u2019s":[144],"intentions,":[145],"while":[146],"maintaining":[147],"nearly":[148],"indistinguishable":[149],"performance":[150],"original":[153],"model,":[154],"thereby":[155],"ensuring":[156],"its":[157],"stealthiness.":[158],"Furthermore,":[159],"beyond":[160],"directly":[161],"affected":[162],"interpreters,":[163],"our":[164],"experiments":[165],"reveal":[166],"four":[168],"additional":[169],"coupled":[171],"poisoned":[174],"are":[176],"indirectly":[177],"influenced,":[178],"underscoring":[179],"attack\u2019s":[181],"transferability.":[182]},"counts_by_year":[{"year":2025,"cited_by_count":4}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}