{"id":"https://openalex.org/W4411337509","doi":"https://doi.org/10.1109/sp61157.2025.00012","title":"My Model is Malware to You: Transforming AI Models into Malware by Abusing TensorFlow APIs","display_name":"My Model is Malware to You: Transforming AI Models into Malware by Abusing TensorFlow APIs","publication_year":2025,"publication_date":"2025-05-12","ids":{"openalex":"https://openalex.org/W4411337509","doi":"https://doi.org/10.1109/sp61157.2025.00012"},"language":"en","primary_location":{"id":"doi:10.1109/sp61157.2025.00012","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp61157.2025.00012","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://ink.library.smu.edu.sg/sis_research/10350","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079985004","display_name":"Ruofan Zhu","orcid":"https://orcid.org/0009-0005-5181-4797"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruofan Zhu","raw_affiliation_strings":["Zhejiang University,Hangzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University,Hangzhou,China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Ganhao Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ganhao Chen","raw_affiliation_strings":["Zhejiang University,Hangzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University,Hangzhou,China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039734151","display_name":"Wenbo Shen","orcid":"https://orcid.org/0000-0003-2899-6121"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenbo Shen","raw_affiliation_strings":["Zhejiang University,Hangzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University,Hangzhou,China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084396416","display_name":"Xiaofei Xie","orcid":"https://orcid.org/0000-0002-1288-6502"},"institutions":[{"id":"https://openalex.org/I79891267","display_name":"Singapore Management University","ror":"https://ror.org/050qmg959","country_code":"SG","type":"education","lineage":["https://openalex.org/I79891267"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Xiaofei Xie","raw_affiliation_strings":["Singapore Management University,Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Singapore Management University,Singapore","institution_ids":["https://openalex.org/I79891267"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5044721876","display_name":"Rui Chang","orcid":"https://orcid.org/0000-0002-0178-0171"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Rui Chang","raw_affiliation_strings":["Zhejiang University,Hangzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University,Hangzhou,China","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.5234,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.94775416,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"486","last_page":"503"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.97079998254776,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.970300018787384,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.9062459468841553},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7614609003067017},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.42607975006103516},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3869645595550537}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.9062459468841553},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7614609003067017},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.42607975006103516},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3869645595550537}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/sp61157.2025.00012","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp61157.2025.00012","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},{"id":"pmh:oai:ink.library.smu.edu.sg:sis_research-11351","is_oa":true,"landing_page_url":"https://ink.library.smu.edu.sg/sis_research/10350","pdf_url":null,"source":{"id":"https://openalex.org/S4306401925","display_name":"Singapore Management University Institutional Knowledge (InK) (Singapore Management University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79891267","host_organization_name":"Singapore Management University","host_organization_lineage":["https://openalex.org/I79891267"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"https://doi.org/10.1109/SP61157.2025.00012","raw_type":"Conference Proceeding Article"}],"best_oa_location":{"id":"pmh:oai:ink.library.smu.edu.sg:sis_research-11351","is_oa":true,"landing_page_url":"https://ink.library.smu.edu.sg/sis_research/10350","pdf_url":null,"source":{"id":"https://openalex.org/S4306401925","display_name":"Singapore Management University Institutional Knowledge (InK) (Singapore Management University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79891267","host_organization_name":"Singapore Management University","host_organization_lineage":["https://openalex.org/I79891267"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"https://doi.org/10.1109/SP61157.2025.00012","raw_type":"Conference Proceeding Article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5848059747","display_name":null,"funder_award_id":"2022YFE0113200","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320320709","display_name":"National Research Foundation Singapore","ror":"https://ror.org/03cpyc314"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W1990175815","https://openalex.org/W2043003570","https://openalex.org/W2962700793","https://openalex.org/W3001007330","https://openalex.org/W3034942609","https://openalex.org/W3087391814","https://openalex.org/W3111614445","https://openalex.org/W3207553988","https://openalex.org/W3212298803","https://openalex.org/W4205480242","https://openalex.org/W4246166885","https://openalex.org/W4379598302","https://openalex.org/W4394745299","https://openalex.org/W4394745402","https://openalex.org/W6713134421","https://openalex.org/W6760237559","https://openalex.org/W6860802650","https://openalex.org/W6861810897"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2097492617","https://openalex.org/W2753240997","https://openalex.org/W1764168690","https://openalex.org/W2537959205","https://openalex.org/W2740895074","https://openalex.org/W2772446090","https://openalex.org/W4284893819"],"abstract_inverted_index":{"The":[0],"rapid":[1],"advancement":[2],"of":[3,52,70,87,151,188],"AI":[4,12],"technologies":[5],"has":[6],"significantly":[7],"increased":[8],"the":[9,45,50,71,80],"demand":[10],"for":[11,56,112,120],"models":[13,124],"across":[14],"various":[15],"industries.":[16],"While":[17],"model":[18,53],"sharing":[19],"reduces":[20],"costs":[21],"and":[22,94,100,118,128,139,159,171,182,200,202],"fosters":[23],"innovation,":[24],"it":[25],"also":[26],"introduces":[27],"security":[28,51,63,72],"risks,":[29,49],"as":[30,91],"attackers":[31],"can":[32],"embed":[33],"malicious":[34],"code":[35,169],"within":[36],"models,":[37],"leading":[38],"to":[39,97,125,136,154,196,208],"potential":[40],"undetected":[41],"attacks":[42],"when":[43],"running":[44],"model.":[46],"Despite":[47],"these":[48,62,134,152,189,194,210],"sharing,":[54],"particularly":[55],"TensorFlow,":[57],"remains":[58],"under-investigated.":[59],"To":[60,103],"address":[61,209],"concerns,":[64],"we":[65,106],"present":[66],"a":[67],"systematic":[68],"analysis":[69],"risks":[73],"associated":[74],"with":[75,144,206],"TensorFlow":[76,88,117,137,180],"APIs.":[77],"We":[78,132,148,191],"introduce":[79],"TensorAbuse":[81],"attack,":[82],"which":[83],"exploits":[84],"hidden":[85],"capabilities":[86],"APIs,":[89],"such":[90],"file":[92,164],"access":[93],"network":[95],"messaging,":[96],"construct":[98],"powerful":[99],"stealthy":[101],"attacks.":[102,190],"facilitate":[104],"this,":[105],"developed":[107],"two":[108],"novel":[109],"techniques:":[110],"one":[111],"identifying":[113],"persistent":[114,142],"APIs":[115,143,153],"in":[116],"another":[119],"leveraging":[121],"large":[122],"language":[123],"accurately":[126],"analyze":[127],"classify":[129],"API":[130],"capabilities.":[131,147],"applied":[133],"techniques":[135],"v2.15.0":[138],"identified":[140],"1,083":[141],"five":[145,156],"main":[146],"exploited":[149],"20":[150],"develop":[155],"attack":[157],"primitives":[158],"four":[160],"synthetic":[161],"attacks,":[162],"including":[163],"leak,":[165],"IP":[166],"exposure,":[167],"arbitrary":[168],"execution,":[170],"shell":[172],"access.":[173],"Our":[174],"tests":[175],"revealed":[176],"that":[177],"Hugging":[178,198],"Face,":[179,199],"Hub,":[181],"ModelScan":[183],"could":[184],"not":[185],"detect":[186],"any":[187],"have":[192],"reported":[193],"findings":[195],"Google,":[197],"ModelScan,":[201],"are":[203],"currently":[204],"working":[205],"them":[207],"issues.":[211]},"counts_by_year":[{"year":2025,"cited_by_count":3}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}