{"id":"https://openalex.org/W4404132842","doi":"https://doi.org/10.1145/3649329.3655682","title":"AdvHunter: Detecting Adversarial Perturbations in Black-Box Neural Networks through Hardware Performance Counters","display_name":"AdvHunter: Detecting Adversarial Perturbations in Black-Box Neural Networks through Hardware Performance Counters","publication_year":2024,"publication_date":"2024-06-23","ids":{"openalex":"https://openalex.org/W4404132842","doi":"https://doi.org/10.1145/3649329.3655682"},"language":"en","primary_location":{"id":"doi:10.1145/3649329.3655682","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3649329.3655682","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3649329.3655682?download=true","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 61st ACM/IEEE Design Automation Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3649329.3655682?download=true","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5053280523","display_name":"Manaar Alam","orcid":"https://orcid.org/0000-0002-3338-2944"},"institutions":[{"id":"https://openalex.org/I120250893","display_name":"New York University Abu Dhabi","ror":"https://ror.org/00e5k0821","country_code":"AE","type":"education","lineage":["https://openalex.org/I120250893","https://openalex.org/I57206974"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Manaar Alam","raw_affiliation_strings":["New York University Abu Dhabi, Abu Dhabi, Abu Dhabi, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0002-3338-2944","affiliations":[{"raw_affiliation_string":"New York University Abu Dhabi, Abu Dhabi, Abu Dhabi, United Arab Emirates","institution_ids":["https://openalex.org/I120250893"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043325974","display_name":"Michail Maniatakos","orcid":"https://orcid.org/0000-0001-6899-0651"},"institutions":[{"id":"https://openalex.org/I120250893","display_name":"New York University Abu Dhabi","ror":"https://ror.org/00e5k0821","country_code":"AE","type":"education","lineage":["https://openalex.org/I120250893","https://openalex.org/I57206974"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Michail Maniatakos","raw_affiliation_strings":["New York University Abu Dhabi, Abu Dhabi, Abu Dhabi, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0001-6899-0651","affiliations":[{"raw_affiliation_string":"New York University Abu Dhabi, Abu Dhabi, Abu Dhabi, United Arab Emirates","institution_ids":["https://openalex.org/I120250893"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I120250893"],"apc_list":null,"apc_paid":null,"fwci":0.7112,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.71995563,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9642000198364258,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9516000151634216,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7213693857192993},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.6918410658836365},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5925383567810059},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5920494198799133},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.515710175037384},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.45096614956855774},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3257165849208832}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7213693857192993},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.6918410658836365},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5925383567810059},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5920494198799133},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.515710175037384},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.45096614956855774},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3257165849208832}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3649329.3655682","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3649329.3655682","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3649329.3655682?download=true","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 61st ACM/IEEE Design Automation Conference","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3649329.3655682","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3649329.3655682","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3649329.3655682?download=true","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 61st ACM/IEEE Design Automation Conference","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Climate action","score":0.5299999713897705,"id":"https://metadata.un.org/sdg/13"}],"awards":[{"id":"https://openalex.org/G5066768796","display_name":null,"funder_award_id":"G1104","funder_id":"https://openalex.org/F4320313203","funder_display_name":"New York University Abu Dhabi"}],"funders":[{"id":"https://openalex.org/F4320313203","display_name":"New York University Abu Dhabi","ror":"https://ror.org/00e5k0821"}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4404132842.pdf"},"referenced_works_count":6,"referenced_works":["https://openalex.org/W2747329762","https://openalex.org/W2901442710","https://openalex.org/W3135970545","https://openalex.org/W3174969113","https://openalex.org/W4221141431","https://openalex.org/W4301045096"],"related_works":["https://openalex.org/W2950183588","https://openalex.org/W3080754722","https://openalex.org/W3093978547","https://openalex.org/W2953536436","https://openalex.org/W3009622996","https://openalex.org/W3203790781","https://openalex.org/W4313346231","https://openalex.org/W2738001131","https://openalex.org/W4285785480","https://openalex.org/W2997056298"],"abstract_inverted_index":{"The":[0],"paper":[1],"introduces":[2],"AdvHunter,":[3],"a":[4,31],"novel":[5],"strategy":[6],"to":[7,52,89,100],"detect":[8,101],"adversarial":[9,111],"examples":[10],"(AEs)":[11],"in":[12,20],"Deep":[13],"Neural":[14],"Networks":[15],"(DNNs).":[16],"AdvHunter":[17,67],"operates":[18],"effectively":[19],"practical":[21],"black-box":[22],"scenarios,":[23],"where":[24],"only":[25],"hard-label":[26],"query":[27],"access":[28,49],"is":[29],"available,":[30],"situation":[32],"often":[33,61],"encountered":[34],"with":[35,64],"proprietary":[36,65],"DNNs.":[37,66,83],"This":[38],"differentiates":[39],"it":[40],"from":[41],"existing":[42],"defenses,":[43],"which":[44],"usually":[45],"rely":[46],"on":[47],"white-box":[48],"or":[50],"need":[51],"be":[53],"integrated":[54],"during":[55,78],"the":[56,75,79,114],"training":[57],"phase":[58,81],"-":[59],"requirements":[60],"not":[62],"feasible":[63],"functions":[68],"by":[69],"monitoring":[70],"data":[71],"flow":[72],"dynamics":[73],"within":[74],"computational":[76],"environment":[77],"inference":[80],"of":[82,96,116],"It":[84],"utilizes":[85],"Hardware":[86],"Performance":[87],"Counters":[88],"monitor":[90],"microarchitectural":[91],"activities":[92],"and":[93,110],"employs":[94],"principles":[95],"Gaussian":[97],"Mixture":[98],"Models":[99],"AEs.":[102],"Extensive":[103],"evaluation":[104],"across":[105],"various":[106],"datasets,":[107],"DNN":[108],"architectures,":[109],"perturbations":[112],"demonstrate":[113],"effectiveness":[115],"AdvHunter.":[117]},"counts_by_year":[{"year":2025,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}