{"id":"https://openalex.org/W4408202158","doi":"https://doi.org/10.1142/s0218126625502834","title":"Input-Aware Slowdown Backdoor Attack on Dynamic Neural Networks","display_name":"Input-Aware Slowdown Backdoor Attack on Dynamic Neural Networks","publication_year":2025,"publication_date":"2025-03-06","ids":{"openalex":"https://openalex.org/W4408202158","doi":"https://doi.org/10.1142/s0218126625502834"},"language":"en","primary_location":{"id":"doi:10.1142/s0218126625502834","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218126625502834","pdf_url":null,"source":{"id":"https://openalex.org/S167602672","display_name":"Journal of Circuits Systems and Computers","issn_l":"0218-1266","issn":["0218-1266","1793-6454"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Circuits, Systems and Computers","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Zhi-Qian Guan","orcid":"https://orcid.org/0009-0000-2415-3739"},"institutions":[{"id":"https://openalex.org/I189210763","display_name":"Yunnan University","ror":"https://ror.org/0040axw97","country_code":"CN","type":"education","lineage":["https://openalex.org/I189210763"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhi-Qian Guan","raw_affiliation_strings":["School of Software, Yunnan University, Kunming, P.\u00a0R.\u00a0China"],"raw_orcid":"https://orcid.org/0009-0000-2415-3739","affiliations":[{"raw_affiliation_string":"School of Software, Yunnan University, Kunming, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I189210763"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jing Liu","orcid":"https://orcid.org/0000-0002-0666-2887"},"institutions":[{"id":"https://openalex.org/I189210763","display_name":"Yunnan University","ror":"https://ror.org/0040axw97","country_code":"CN","type":"education","lineage":["https://openalex.org/I189210763"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jing Liu","raw_affiliation_strings":["School of Software, Yunnan University, Kunming, P.\u00a0R.\u00a0China"],"raw_orcid":"https://orcid.org/0000-0002-0666-2887","affiliations":[{"raw_affiliation_string":"School of Software, Yunnan University, Kunming, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I189210763"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101623518","display_name":"Zhenli He","orcid":"https://orcid.org/0000-0002-7986-2222"},"institutions":[{"id":"https://openalex.org/I189210763","display_name":"Yunnan University","ror":"https://ror.org/0040axw97","country_code":"CN","type":"education","lineage":["https://openalex.org/I189210763"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenli He","raw_affiliation_strings":["School of Software, Yunnan University, Kunming, P.\u00a0R.\u00a0China"],"raw_orcid":"https://orcid.org/0000-0002-7986-2222","affiliations":[{"raw_affiliation_string":"School of Software, Yunnan University, Kunming, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I189210763"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087257806","display_name":"Shengfa Miao","orcid":"https://orcid.org/0000-0003-1210-1135"},"institutions":[{"id":"https://openalex.org/I189210763","display_name":"Yunnan University","ror":"https://ror.org/0040axw97","country_code":"CN","type":"education","lineage":["https://openalex.org/I189210763"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shengfa Miao","raw_affiliation_strings":["School of Software, Yunnan University, Kunming, P.\u00a0R.\u00a0China"],"raw_orcid":"https://orcid.org/0000-0003-1210-1135","affiliations":[{"raw_affiliation_string":"School of Software, Yunnan University, Kunming, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I189210763"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5060042554","display_name":"Di Liu","orcid":"https://orcid.org/0000-0002-4365-2768"},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Di Liu","raw_affiliation_strings":["Department of Computer Science, NTNU, Trondheim, Norway"],"raw_orcid":"https://orcid.org/0000-0002-4365-2768","affiliations":[{"raw_affiliation_string":"Department of Computer Science, NTNU, Trondheim, Norway","institution_ids":["https://openalex.org/I204778367"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.01598394,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"34","issue":"16","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9937000274658203,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9937000274658203,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.936320960521698},{"id":"https://openalex.org/keywords/slowdown","display_name":"Slowdown","score":0.8446042537689209},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.632006049156189},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5221593379974365},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.34793251752853394},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.18155139684677124},{"id":"https://openalex.org/keywords/economics","display_name":"Economics","score":0.1353335976600647}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.936320960521698},{"id":"https://openalex.org/C2777242750","wikidata":"https://www.wikidata.org/wiki/Q31351","display_name":"Slowdown","level":2,"score":0.8446042537689209},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.632006049156189},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5221593379974365},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.34793251752853394},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.18155139684677124},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.1353335976600647},{"id":"https://openalex.org/C50522688","wikidata":"https://www.wikidata.org/wiki/Q189833","display_name":"Economic growth","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1142/s0218126625502834","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218126625502834","pdf_url":null,"source":{"id":"https://openalex.org/S167602672","display_name":"Journal of Circuits Systems and Computers","issn_l":"0218-1266","issn":["0218-1266","1793-6454"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Circuits, Systems and Computers","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3759924188","display_name":null,"funder_award_id":"202302AD080006","funder_id":"https://openalex.org/F4320336602","funder_display_name":"Major Science and Technology Projects in Yunnan Province"},{"id":"https://openalex.org/G7443881005","display_name":null,"funder_award_id":"62362068","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320336602","display_name":"Major Science and Technology Projects in Yunnan Province","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W1680622244","https://openalex.org/W2097117768","https://openalex.org/W2145023731","https://openalex.org/W2194775991","https://openalex.org/W2543927648","https://openalex.org/W2942091739","https://openalex.org/W2962677625","https://openalex.org/W2963393494","https://openalex.org/W3012113073","https://openalex.org/W3034866909","https://openalex.org/W3035424951","https://openalex.org/W3042368254","https://openalex.org/W3096831136","https://openalex.org/W3178326529","https://openalex.org/W3188772578","https://openalex.org/W3197880668","https://openalex.org/W3204647170","https://openalex.org/W3211127556","https://openalex.org/W4280553748","https://openalex.org/W4312648739","https://openalex.org/W4386075644"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4401407399"],"abstract_inverted_index":{"Dynamic":[0],"neural":[1],"networks":[2,30],"(DyNNs)":[3],"are":[4,101,182],"able":[5],"to":[6,11,47,58,157],"adapt":[7],"their":[8],"executions/routines":[9],"according":[10],"various":[12],"difficulties":[13],"of":[14,28,66,89,122,139,152,172],"inputs":[15,57],"while":[16,164],"not":[17],"significantly":[18,147],"sacrificing":[19],"accuracy.":[20],"Such":[21],"adaptivity":[22,40],"makes":[23],"them":[24],"an":[25],"emerging":[26],"alternative":[27],"efficient":[29],"for":[31],"resource-constraint":[32],"devices,":[33],"thus":[34,62],"receiving":[35],"increasing":[36],"attention.":[37],"However,":[38],"the":[39,64,73,87,90,92,113,120,123,149,161,168,173],"also":[41],"poses":[42],"a":[43,81,107],"new":[44,82],"robust":[45],"challenge":[46],"DyNNs,":[48,61],"i.e.,":[49],"efficiency":[50,171],"or":[51],"slowdown":[52,74,141],"attacks":[53],"which":[54,100],"stealthily":[55],"manipulate":[56],"slow":[59],"down":[60],"undermining":[63],"superiority":[65],"DyNNs.":[67],"In":[68],"this":[69],"paper,":[70],"we":[71],"investigate":[72],"backdoor":[75,98],"attack":[76,83,94,115,130,135,142],"on":[77],"DyNNs":[78],"and":[79,170,180],"propose":[80],"method.":[84],"Different":[85],"from":[86,106],"state":[88,121],"art,":[91],"proposed":[93,114],"method":[95,116,131],"implements":[96],"input-aware":[97],"triggers,":[99],"generated":[102],"using":[103],"two":[104,140],"generators":[105],"generator-discriminator":[108],"architecture.":[109],"We":[110],"extensively":[111],"evaluate":[112],"in":[117,137],"comparison":[118],"with":[119],"art.":[124],"Experimental":[125],"results":[126],"show":[127],"that":[128],"our":[129],"can":[132],"achieve":[133],"better":[134],"effectiveness":[136],"terms":[138],"metrics.":[143],"The":[144],"poisoned":[145],"model":[146,174],"increases":[148],"average":[150],"number":[151],"computational":[153],"blocks":[154],"by":[155],"up":[156],"4.4":[158],"times":[159],"over":[160],"clean":[162,176],"counterpart":[163],"only":[165],"slightly":[166],"degrading":[167],"accuracy":[169],"under":[175],"data.":[177],"Our":[178],"code":[179],"models":[181],"available":[183],"at":[184],"https://github.com/zhiqianguan/dynn_backdoor":[185],".":[186]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}