{"id":"https://openalex.org/W3178326529","doi":"https://doi.org/10.1145/3460319.3464809","title":"AdvDoor: adversarial backdoor attack of deep learning system","display_name":"AdvDoor: adversarial backdoor attack of deep learning system","publication_year":2021,"publication_date":"2021-07-08","ids":{"openalex":"https://openalex.org/W3178326529","doi":"https://doi.org/10.1145/3460319.3464809","mag":"3178326529"},"language":"en","primary_location":{"id":"doi:10.1145/3460319.3464809","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3460319.3464809","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 30th ACM SIGSOFT International Symposium on Software Testing and Analysis","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100406666","display_name":"Quan Zhang","orcid":"https://orcid.org/0000-0001-7778-4243"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Quan Zhang","raw_affiliation_strings":["Tsinghua University, China"],"raw_orcid":"https://orcid.org/0000-0001-7778-4243","affiliations":[{"raw_affiliation_string":"Tsinghua University, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077312836","display_name":"Yifeng Ding","orcid":"https://orcid.org/0000-0002-8151-8164"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yifeng Ding","raw_affiliation_strings":["Tsinghua University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052271946","display_name":"Yongqiang Tian","orcid":"https://orcid.org/0000-0003-1644-2965"},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Yongqiang Tian","raw_affiliation_strings":["University of Waterloo, Canada"],"raw_orcid":"https://orcid.org/0000-0003-1644-2965","affiliations":[{"raw_affiliation_string":"University of Waterloo, Canada","institution_ids":["https://openalex.org/I151746483"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100705670","display_name":"Jianmin Guo","orcid":"https://orcid.org/0000-0001-6872-6383"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianmin Guo","raw_affiliation_strings":["Tsinghua University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016711800","display_name":"Min Yuan","orcid":"https://orcid.org/0000-0001-6216-7584"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Min Yuan","raw_affiliation_strings":["WeBank, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"WeBank, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5060117799","display_name":"Yu Jiang","orcid":"https://orcid.org/0000-0003-0955-503X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Jiang","raw_affiliation_strings":["Tsinghua University, China"],"raw_orcid":"https://orcid.org/0000-0003-0955-503X","affiliations":[{"raw_affiliation_string":"Tsinghua University, China","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":58,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"127","last_page":"138"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9207000136375427,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9194999933242798,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9990501403808594},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7762539386749268},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6884011030197144},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5640959143638611},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4868301749229431},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.44803380966186523},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3462623357772827}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9990501403808594},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7762539386749268},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6884011030197144},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5640959143638611},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4868301749229431},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.44803380966186523},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3462623357772827}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3460319.3464809","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3460319.3464809","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 30th ACM SIGSOFT International Symposium on Software Testing and Analysis","raw_type":"proceedings-article"},{"id":"pmh:oai:repository.hkust.edu.hk:1783.1-136191","is_oa":false,"landing_page_url":"http://lbdiscover.ust.hk/uresolver?url_ver=Z39.88-2004&rft_val_fmt=info:ofi/fmt:kev:mtx:journal&rfr_id=info:sid/HKUST:SPI&rft.genre=article&rft.issn=&rft.volume=&rft.issue=&rft.date=2021&rft.spage=127&rft.aulast=Zhang&rft.aufirst=Quan&rft.atitle=AdvDoor%3A+Adversarial+backdoor+attack+of+deep+learning+system&rft.title=ISSTA+2021+-+Proceedings+of+the+30th+ACM+SIGSOFT+International+Symposium+on+Software+Testing+and+Analysis","pdf_url":null,"source":{"id":"https://openalex.org/S4306401796","display_name":"Rare & Special e-Zone (The Hong Kong University of Science and Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I200769079","host_organization_name":"Hong Kong University of Science and Technology","host_organization_lineage":["https://openalex.org/I200769079"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference paper"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W1686810756","https://openalex.org/W1966948031","https://openalex.org/W2067713319","https://openalex.org/W2180612164","https://openalex.org/W2194775991","https://openalex.org/W2243397390","https://openalex.org/W2325939864","https://openalex.org/W2543927648","https://openalex.org/W2774423163","https://openalex.org/W2774644650","https://openalex.org/W2888824816","https://openalex.org/W2900018096","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W2963178695","https://openalex.org/W2963857521","https://openalex.org/W2964041528","https://openalex.org/W2982138961","https://openalex.org/W2986013765","https://openalex.org/W2988580277","https://openalex.org/W3012113073","https://openalex.org/W3096024389","https://openalex.org/W3102670879","https://openalex.org/W3106646114","https://openalex.org/W3177176579"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W3015678314","https://openalex.org/W4281902577","https://openalex.org/W4200629851","https://openalex.org/W3009072493","https://openalex.org/W4386185023","https://openalex.org/W4317672133","https://openalex.org/W3140988292","https://openalex.org/W4386080799","https://openalex.org/W4380075502"],"abstract_inverted_index":{"Deep":[0],"Learning":[1],"(DL)":[2],"system":[3],"has":[4],"been":[5],"widely":[6],"used":[7],"in":[8,79],"many":[9],"critical":[10],"applications,":[11],"such":[12],"as":[13],"autonomous":[14],"vehicles":[15],"and":[16,49,82,129,151,169,175],"unmanned":[17],"aerial":[18],"vehicles.":[19],"However,":[20],"their":[21],"security":[22],"is":[23,29,92],"threatened":[24],"by":[25,31,55],"backdoor":[26,114],"attack,":[27],"which":[28,67],"achieved":[30],"adding":[32],"artificial":[33],"patterns":[34],"on":[35],"specific":[36],"training":[37],"data.":[38],"Existing":[39],"attack":[40,103],"methods":[41],"normally":[42],"poison":[43],"the":[44,64,69,77,123,134,139,144,148,156,167,178],"data":[45,136,158],"using":[46],"a":[47],"patch,":[48],"they":[50],"can":[51,97,111,126],"be":[52,98,127,160],"easily":[53],"detected":[54],"existing":[56,84],"detection":[57,86,115,182],"methods.":[58,87,116,183],"In":[59,141],"this":[60,172],"work,":[61],"we":[62],"propose":[63],"Adversarial":[65,72,95,109],"Backdoor,":[66],"utilizes":[68],"Targeted":[70],"Universal":[71],"Perturbation":[73],"(TUAP)":[74],"to":[75,165,176],"hide":[76],"anomalies":[78],"DL":[80],"models":[81,125,150],"confuse":[83],"powerful":[85],"With":[88],"extensive":[89],"experiments,":[90],"it":[91],"demonstrated":[93],"that":[94],"Backdoor":[96,110],"injected":[99],"stably":[100],"with":[101],"an":[102],"success":[104],"rate":[105],"around":[106,120],"98%.":[107],"Moreover,":[108],"bypass":[112,138],"state-of-the-art":[113],"More":[117],"specifically,":[118],"only":[119],"37%":[121],"of":[122,133,155,171,180],"poisoned":[124,135,149,157],"caught,":[128],"less":[130],"than":[131,153],"29%":[132],"cannot":[137],"detection.":[140],"contrast,":[142],"for":[143],"patch":[145],"backdoor,":[146],"all":[147],"more":[152],"80%":[154],"will":[159],"detected.":[161],"This":[162],"work":[163],"intends":[164],"alarm":[166],"researchers":[168],"developers":[170],"potential":[173],"threat":[174],"inspire":[177],"designing":[179],"effective":[181]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":15},{"year":2024,"cited_by_count":22},{"year":2023,"cited_by_count":13},{"year":2022,"cited_by_count":7}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}