{"id":"https://openalex.org/W3121891885","doi":"https://doi.org/10.1145/3408288","title":"Adversarial Perturbation Attacks on ML-based CAD: A Case Study on CNN-based Lithographic Hotspot Detection","display_name":"Adversarial Perturbation Attacks on ML-based CAD: A Case Study on CNN-based Lithographic Hotspot Detection","publication_year":2020,"publication_date":"2020-08-21","ids":{"openalex":"https://openalex.org/W3121891885","doi":"https://doi.org/10.1145/3408288","mag":"3121891885"},"language":"en","primary_location":{"id":"pmh:oai:repository.hkust.edu.hk:1783.1-120436","is_oa":false,"landing_page_url":"http://gateway.isiknowledge.com/gateway/Gateway.cgi?GWVersion=2&SrcAuth=LinksAMR&SrcApp=PARTNER_APP&DestLinkType=FullRecord&DestApp=WOS&KeyUT=000577156200013","pdf_url":null,"source":{"id":"https://openalex.org/S4306401796","display_name":"Rare & Special e-Zone (The Hong Kong University of Science and Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I200769079","host_organization_name":"Hong Kong University of Science and Technology","host_organization_lineage":["https://openalex.org/I200769079"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"type":"article","indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100389879","display_name":"Kang Liu","orcid":"https://orcid.org/0000-0001-7231-8315"},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kang Liu","raw_affiliation_strings":["New York University, Brooklyn, NY, USA"],"raw_orcid":"https://orcid.org/0000-0001-7231-8315","affiliations":[{"raw_affiliation_string":"New York University, Brooklyn, NY, USA","institution_ids":["https://openalex.org/I57206974"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100642435","display_name":"Haoyu Yang","orcid":"https://orcid.org/0000-0002-4709-0061"},"institutions":[{"id":"https://openalex.org/I177725633","display_name":"Chinese University of Hong Kong","ror":"https://ror.org/00t33hh48","country_code":"HK","type":"education","lineage":["https://openalex.org/I177725633"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Haoyu Yang","raw_affiliation_strings":["Chinese University of Hong Kong, Shatin, Hong Kong"],"raw_orcid":"https://orcid.org/0000-0002-4709-0061","affiliations":[{"raw_affiliation_string":"Chinese University of Hong Kong, Shatin, Hong Kong","institution_ids":["https://openalex.org/I177725633"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071995111","display_name":"Yuzhe Ma","orcid":"https://orcid.org/0000-0002-3612-4182"},"institutions":[{"id":"https://openalex.org/I177725633","display_name":"Chinese University of Hong Kong","ror":"https://ror.org/00t33hh48","country_code":"HK","type":"education","lineage":["https://openalex.org/I177725633"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Yuzhe Ma","raw_affiliation_strings":["Chinese University of Hong Kong, Shatin, Hong Kong"],"raw_orcid":"https://orcid.org/0000-0002-3612-4182","affiliations":[{"raw_affiliation_string":"Chinese University of Hong Kong, Shatin, Hong Kong","institution_ids":["https://openalex.org/I177725633"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069388936","display_name":"Benjamin Tan","orcid":"https://orcid.org/0000-0002-7642-3638"},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Benjamin Tan","raw_affiliation_strings":["New York University, Brooklyn, NY, USA"],"raw_orcid":"https://orcid.org/0000-0002-7642-3638","affiliations":[{"raw_affiliation_string":"New York University, Brooklyn, NY, USA","institution_ids":["https://openalex.org/I57206974"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051340429","display_name":"Bei Yu","orcid":"https://orcid.org/0000-0001-6406-4810"},"institutions":[{"id":"https://openalex.org/I177725633","display_name":"Chinese University of Hong Kong","ror":"https://ror.org/00t33hh48","country_code":"HK","type":"education","lineage":["https://openalex.org/I177725633"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Bei Yu","raw_affiliation_strings":["Chinese University of Hong Kong, Shatin, Hong Kong"],"raw_orcid":"https://orcid.org/0000-0001-6406-4810","affiliations":[{"raw_affiliation_string":"Chinese University of Hong Kong, Shatin, Hong Kong","institution_ids":["https://openalex.org/I177725633"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070795253","display_name":"Evangeline F. Y. Young","orcid":"https://orcid.org/0000-0003-0623-1590"},"institutions":[{"id":"https://openalex.org/I177725633","display_name":"Chinese University of Hong Kong","ror":"https://ror.org/00t33hh48","country_code":"HK","type":"education","lineage":["https://openalex.org/I177725633"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Evangeline F. Y. Young","raw_affiliation_strings":["Chinese University of Hong Kong, Shatin, Hong Kong"],"raw_orcid":"https://orcid.org/0000-0003-0623-1590","affiliations":[{"raw_affiliation_string":"Chinese University of Hong Kong, Shatin, Hong Kong","institution_ids":["https://openalex.org/I177725633"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059648257","display_name":"Ramesh Karri","orcid":"https://orcid.org/0000-0001-7989-5617"},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ramesh Karri","raw_affiliation_strings":["New York University, Brooklyn, NY, USA"],"raw_orcid":"https://orcid.org/0000-0001-7989-5617","affiliations":[{"raw_affiliation_string":"New York University, Brooklyn, NY, USA","institution_ids":["https://openalex.org/I57206974"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5010950688","display_name":"Siddharth Garg","orcid":"https://orcid.org/0000-0002-6158-9512"},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Siddharth Garg","raw_affiliation_strings":["New York University, Brooklyn, NY, USA"],"raw_orcid":"https://orcid.org/0000-0002-6158-9512","affiliations":[{"raw_affiliation_string":"New York University, Brooklyn, NY, USA","institution_ids":["https://openalex.org/I57206974"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.1734,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.84162641,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"25","issue":"5","first_page":"3408288","last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14117","display_name":"Integrated Circuits and Semiconductor Failure Analysis","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9923999905586243,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8103550672531128},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.650994598865509},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.6429885029792786},{"id":"https://openalex.org/keywords/hotspot","display_name":"Hotspot (geology)","score":0.6076861023902893},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5262780785560608},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5188897252082825},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.43244606256484985},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3969545364379883},{"id":"https://openalex.org/keywords/computer-engineering","display_name":"Computer engineering","score":0.3664371967315674},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.34003111720085144}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8103550672531128},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.650994598865509},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.6429885029792786},{"id":"https://openalex.org/C146481406","wikidata":"https://www.wikidata.org/wiki/Q105131","display_name":"Hotspot (geology)","level":2,"score":0.6076861023902893},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5262780785560608},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5188897252082825},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.43244606256484985},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3969545364379883},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.3664371967315674},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.34003111720085144},{"id":"https://openalex.org/C8058405","wikidata":"https://www.wikidata.org/wiki/Q46255","display_name":"Geophysics","level":1,"score":0.0},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:repository.hkust.edu.hk:1783.1-120436","is_oa":false,"landing_page_url":"http://gateway.isiknowledge.com/gateway/Gateway.cgi?GWVersion=2&SrcAuth=LinksAMR&SrcApp=PARTNER_APP&DestLinkType=FullRecord&DestApp=WOS&KeyUT=000577156200013","pdf_url":null,"source":{"id":"https://openalex.org/S4306401796","display_name":"Rare & Special e-Zone (The Hong Kong University of Science and Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I200769079","host_organization_name":"Hong Kong University of Science and Technology","host_organization_lineage":["https://openalex.org/I200769079"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"mag:3121891885","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W2057596653","https://openalex.org/W2068961782","https://openalex.org/W2095410905","https://openalex.org/W2543927648","https://openalex.org/W2603766943","https://openalex.org/W2607219512","https://openalex.org/W2618043096","https://openalex.org/W2640329709","https://openalex.org/W2657631929","https://openalex.org/W2753783305","https://openalex.org/W2773446523","https://openalex.org/W2794046273","https://openalex.org/W2794271438","https://openalex.org/W2798302089","https://openalex.org/W2806976363","https://openalex.org/W2896499334","https://openalex.org/W2899885603","https://openalex.org/W2909499127","https://openalex.org/W2909697628","https://openalex.org/W2911061557","https://openalex.org/W2921503362","https://openalex.org/W2936148765","https://openalex.org/W2942091739","https://openalex.org/W2946443981","https://openalex.org/W2963359529","https://openalex.org/W2964082701","https://openalex.org/W2964116600"],"related_works":["https://openalex.org/W2953611638","https://openalex.org/W2969568079","https://openalex.org/W2995536569","https://openalex.org/W3083459508","https://openalex.org/W2750396644","https://openalex.org/W2963149332","https://openalex.org/W2972906846","https://openalex.org/W3196675449","https://openalex.org/W3177301441","https://openalex.org/W3089898189","https://openalex.org/W3114556617","https://openalex.org/W3101452427","https://openalex.org/W3199948372","https://openalex.org/W3106788038","https://openalex.org/W3168826510","https://openalex.org/W2996623839","https://openalex.org/W2906038546","https://openalex.org/W3113662299","https://openalex.org/W3111088413","https://openalex.org/W3080913164"],"abstract_inverted_index":{"There":[0],"is":[1],"substantial":[2],"interest":[3],"in":[4,34,161],"the":[5,13,51,113,150,186],"use":[6,89],"of":[7,53,94,175,188,203],"machine":[8],"learning":[9,28],"(ML)-based":[10],"techniques":[11],"throughout":[12],"electronic":[14],"computer-aided":[15],"design":[16],"(CAD)":[17],"flow,":[18],"particularly":[19],"those":[20],"based":[21,170],"on":[22,118,171],"deep":[23,27],"learning.":[24],"However,":[25],"while":[26],"methods":[29],"have":[30,38,104],"surpassed":[31],"state-of-the-art":[32,119],"performance":[33],"several":[35],"applications,":[36],"they":[37],"exhibited":[39],"intrinsic":[40],"susceptibility":[41],"to":[42,50,65,72,138,158,184],"adversarial":[43,68,115,181,206],"perturbations":[44,69,163],"-":[45],"small":[46,127],"but":[47],"deliberate":[48],"alterations":[49],"input":[52],"a":[54,90,139,144,166,172,201],"neural":[55,101],"network,":[56],"precipitating":[57],"incorrect":[58],"predictions.":[59],"In":[60,108],"this":[61,86,109,195],"article,":[62],"we":[63,88,111,124],"seek":[64],"investigate":[66],"whether":[67],"pose":[70],"risks":[71,81],"ML-based":[73],"CAD":[74],"tools,":[75],"and":[76,135,192],"if":[77],"so,":[78],"how":[79],"these":[80],"can":[82,141],"be":[83],"mitigated.":[84],"To":[85],"end,":[87],"motivating":[91],"case":[92],"study":[93],"lithographic":[95],"hotspot":[96,121,146,154,190],"detection,":[97],"for":[98],"which":[99],"convolutional":[100],"networks":[102],"(CNN)":[103],"shown":[105],"great":[106],"promise.":[107],"context,":[110],"show":[112,125,193],"first":[114],"perturbation":[116],"attacks":[117,207],"CNN-based":[120,145,189],"detectors;":[122],"specifically,":[123],"that":[126,164,194],"(on":[128],"average":[129],"0.5%":[130],"modified":[131,151],"area),":[132],"functionality":[133],"preserving,":[134],"design-constraint-satisfying":[136],"changes":[137],"layout":[140,152],"nonetheless":[142],"trick":[143],"detector":[147],"into":[148],"predicting":[149],"as":[153],"free":[155],"(with":[156],"up":[157],"99.7%":[159],"success":[160],"finding":[162],"flip":[165],"detector's":[167],"output":[168],"prediction,":[169],"given":[173],"set":[174],"attack":[176],"constraints).":[177],"We":[178],"propose":[179],"an":[180],"retraining":[182],"strategy":[183,196],"improve":[185],"robustness":[187,199],"detection":[191],"significantly":[197],"improves":[198],"(by":[200],"factor":[202],"\u223c3)":[204],"against":[205],"without":[208],"compromising":[209],"classification":[210],"accuracy.":[211]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":1}],"updated_date":"2025-11-06T04:12:42.849631","created_date":"2025-10-10T00:00:00"}