{"id":"https://openalex.org/W4409311429","doi":"https://doi.org/10.1145/3720471","title":"Verification of Bit-Flip Attacks against Quantized Neural Networks","display_name":"Verification of Bit-Flip Attacks against Quantized Neural Networks","publication_year":2025,"publication_date":"2025-04-09","ids":{"openalex":"https://openalex.org/W4409311429","doi":"https://doi.org/10.1145/3720471"},"language":"en","primary_location":{"id":"doi:10.1145/3720471","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3720471","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3720471","source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3720471","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5046247329","display_name":"Yedi Zhang","orcid":"https://orcid.org/0000-0003-1005-2114"},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yedi Zhang","raw_affiliation_strings":["National University of Singapore, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0003-1005-2114","affiliations":[{"raw_affiliation_string":"National University of Singapore, Singapore, Singapore","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Lei Huang","orcid":"https://orcid.org/0009-0002-6412-2149"},"institutions":[{"id":"https://openalex.org/I30809798","display_name":"ShanghaiTech University","ror":"https://ror.org/030bhh786","country_code":"CN","type":"education","lineage":["https://openalex.org/I30809798"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lei Huang","raw_affiliation_strings":["ShanghaiTech University, Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0002-6412-2149","affiliations":[{"raw_affiliation_string":"ShanghaiTech University, Shanghai, China","institution_ids":["https://openalex.org/I30809798"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101924725","display_name":"Pengfei Gao","orcid":"https://orcid.org/0000-0003-3800-2565"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pengfei Gao","raw_affiliation_strings":["ByteDance Inc, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-3800-2565","affiliations":[{"raw_affiliation_string":"ByteDance Inc, Beijing, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027425633","display_name":"Fu Song","orcid":"https://orcid.org/0000-0002-0581-2679"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fu Song","raw_affiliation_strings":["Institute of Software at Chinese Academy of Sciences, Key Laboratory of System Software (Chinese Academy of Sciences) and State Key Laboratory of Computer Science, Beijing, China","Nanjing Institute of Software Technology, Nanjing, China","University of Chinese Academy of Sciences, Beijing, China","Institute of Software at Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-0581-2679","affiliations":[{"raw_affiliation_string":"Institute of Software at Chinese Academy of Sciences, Key Laboratory of System Software (Chinese Academy of Sciences) and State Key Laboratory of Computer Science, Beijing, China","institution_ids":["https://openalex.org/I4210128818"]},{"raw_affiliation_string":"Nanjing Institute of Software Technology, Nanjing, China","institution_ids":["https://openalex.org/I4210128818"]},{"raw_affiliation_string":"University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]},{"raw_affiliation_string":"Institute of Software at Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100429004","display_name":"Jun Sun","orcid":"https://orcid.org/0000-0002-3545-1392"},"institutions":[{"id":"https://openalex.org/I79891267","display_name":"Singapore Management University","ror":"https://ror.org/050qmg959","country_code":"SG","type":"education","lineage":["https://openalex.org/I79891267"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Jun Sun","raw_affiliation_strings":["Singapore Management University, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-3545-1392","affiliations":[{"raw_affiliation_string":"Singapore Management University, Singapore, Singapore","institution_ids":["https://openalex.org/I79891267"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085067496","display_name":"Jin Song Dong","orcid":"https://orcid.org/0000-0002-6512-8326"},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Jin Song Dong","raw_affiliation_strings":["National University of Singapore, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-6512-8326","affiliations":[{"raw_affiliation_string":"National University of Singapore, Singapore, Singapore","institution_ids":["https://openalex.org/I165932596"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.1284,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.91392037,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":"9","issue":"OOPSLA1","first_page":"984","last_page":"1014"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/bit","display_name":"Bit (key)","score":0.652341365814209},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5744460821151733},{"id":"https://openalex.org/keywords/flip","display_name":"Flip","score":0.546323835849762},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.49595603346824646},{"id":"https://openalex.org/keywords/arithmetic","display_name":"Arithmetic","score":0.34279000759124756},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.25880300998687744},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.2092917561531067},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.19535741209983826},{"id":"https://openalex.org/keywords/chemistry","display_name":"Chemistry","score":0.09761619567871094}],"concepts":[{"id":"https://openalex.org/C117011727","wikidata":"https://www.wikidata.org/wiki/Q1278488","display_name":"Bit (key)","level":2,"score":0.652341365814209},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5744460821151733},{"id":"https://openalex.org/C2776591724","wikidata":"https://www.wikidata.org/wiki/Q5459651","display_name":"Flip","level":3,"score":0.546323835849762},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.49595603346824646},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.34279000759124756},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.25880300998687744},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2092917561531067},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.19535741209983826},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.09761619567871094},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C190283241","wikidata":"https://www.wikidata.org/wiki/Q14599311","display_name":"Apoptosis","level":2,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3720471","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3720471","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3720471","source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"},{"id":"pmh:oai:ink.library.smu.edu.sg:sis_research-11159","is_oa":false,"landing_page_url":"https://ink.library.smu.edu.sg/sis_research/10159","pdf_url":null,"source":{"id":"https://openalex.org/S4306401925","display_name":"Singapore Management University Institutional Knowledge (InK) (Singapore Management University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79891267","host_organization_name":"Singapore Management University","host_organization_lineage":["https://openalex.org/I79891267"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"https://doi.org/10.1145/3720471","raw_type":"Journal Article"},{"id":"pmh:oai:research-repository.griffith.edu.au:10072/436880","is_oa":true,"landing_page_url":"https://hdl.handle.net/10072/436880","pdf_url":null,"source":{"id":"https://openalex.org/S7407064376","display_name":"Griffith Research Online","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Journal article"}],"best_oa_location":{"id":"doi:10.1145/3720471","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3720471","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3720471","source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3882347383","display_name":null,"funder_award_id":"Tier 3","funder_id":"https://openalex.org/F4320320751","funder_display_name":"Ministry of Education - Singapore"},{"id":"https://openalex.org/G6854926366","display_name":null,"funder_award_id":"Tier 2","funder_id":"https://openalex.org/F4320320751","funder_display_name":"Ministry of Education - Singapore"},{"id":"https://openalex.org/G7288403212","display_name":null,"funder_award_id":"T2EP20222-0037","funder_id":"https://openalex.org/F4320320751","funder_display_name":"Ministry of Education - Singapore"}],"funders":[{"id":"https://openalex.org/F4320320751","display_name":"Ministry of Education - Singapore","ror":"https://ror.org/01kcva023"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4409311429.pdf","grobid_xml":"https://content.openalex.org/works/W4409311429.grobid-xml"},"referenced_works_count":67,"referenced_works":["https://openalex.org/W1829732909","https://openalex.org/W2085992264","https://openalex.org/W2170489924","https://openalex.org/W2594877703","https://openalex.org/W2747329762","https://openalex.org/W2794609696","https://openalex.org/W2802557767","https://openalex.org/W2807835252","https://openalex.org/W2896500468","https://openalex.org/W2900153411","https://openalex.org/W2917325587","https://openalex.org/W2939057911","https://openalex.org/W2946149952","https://openalex.org/W2957311447","https://openalex.org/W2963122961","https://openalex.org/W2963600714","https://openalex.org/W2974147052","https://openalex.org/W2974891422","https://openalex.org/W2981639301","https://openalex.org/W2981860227","https://openalex.org/W2982540258","https://openalex.org/W2998161546","https://openalex.org/W3004061291","https://openalex.org/W3034665124","https://openalex.org/W3046662910","https://openalex.org/W3092516112","https://openalex.org/W3094683669","https://openalex.org/W3102139284","https://openalex.org/W3102458427","https://openalex.org/W3103148066","https://openalex.org/W3133752511","https://openalex.org/W3136021864","https://openalex.org/W3147451797","https://openalex.org/W3153453329","https://openalex.org/W3155048100","https://openalex.org/W3157763265","https://openalex.org/W3166180472","https://openalex.org/W3168587836","https://openalex.org/W3176862352","https://openalex.org/W3183549096","https://openalex.org/W3212502396","https://openalex.org/W3213793813","https://openalex.org/W4211137390","https://openalex.org/W4224919922","https://openalex.org/W4233996382","https://openalex.org/W4242053016","https://openalex.org/W4245276998","https://openalex.org/W4280555383","https://openalex.org/W4287254789","https://openalex.org/W4296270209","https://openalex.org/W4306407446","https://openalex.org/W4312596145","https://openalex.org/W4312620108","https://openalex.org/W4312770063","https://openalex.org/W4313563880","https://openalex.org/W4319596548","https://openalex.org/W4378902066","https://openalex.org/W4378904019","https://openalex.org/W4384521896","https://openalex.org/W4385688985","https://openalex.org/W4388574628","https://openalex.org/W4390872667","https://openalex.org/W4391568841","https://openalex.org/W4393161192","https://openalex.org/W4394673457","https://openalex.org/W4402397315","https://openalex.org/W4402457520"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W4327546585","https://openalex.org/W2411923897","https://openalex.org/W4394546135","https://openalex.org/W4285347720","https://openalex.org/W4200259850","https://openalex.org/W2333831899","https://openalex.org/W2484894494"],"abstract_inverted_index":{"In":[0],"the":[1,9,61,72,86,94,139,154,160],"rapidly":[2],"evolving":[3],"landscape":[4],"of":[5,11,26,44,64,75,96,162],"neural":[6,12,66,77],"network":[7],"security,":[8],"resilience":[10,161],"networks":[13,67,78],"against":[14,57,99],"bit-flip":[15,97,141],"attacks":[16,70,98],"(i.e.,":[17],"an":[18,22,118,122,172],"attacker":[19],"maliciously":[20],"flips":[21],"extremely":[23],"small":[24],"amount":[25],"bits":[27],"within":[28],"its":[29,197],"parameter":[30],"storage":[31],"memory":[32],"system":[33],"to":[34,68,91,102,134,158],"induce":[35],"harmful":[36],"behavior),":[37],"has":[38],"emerged":[39],"as":[40,53],"a":[41,54,108,129,145,150],"relevant":[42],"area":[43],"research.":[45],"Existing":[46],"studies":[47],"suggest":[48],"that":[49,137],"quantization":[50,205],"may":[51],"serve":[52],"viable":[55],"defense":[56],"such":[58,69,163],"attacks.":[59],"Recognizing":[60],"documented":[62],"susceptibility":[63],"real-valued":[65],"and":[71,110,121,188,199,207],"comparative":[73],"robustness":[74],"quantized":[76],"(QNNs),":[79],"in":[80,107],"this":[81,168],"work,":[82],"we":[83,126,166],"introduce":[84],"BFAVerifier,":[85],"first":[87,127],"verification":[88,169],"framework":[89],"designed":[90],"formally":[92],"verify":[93],"absence":[95],"QNNs":[100],"or":[101],"identify":[103],"all":[104],"vulnerable":[105],"parameters":[106,136],"sound":[109,151],"rigorous":[111],"manner.":[112],"BFAVerifier":[113,184],"comprises":[114],"two":[115],"integral":[116],"components:":[117],"abstraction-based":[119],"method":[120],"MILP-based":[123],"method.":[124],"Specifically,":[125],"conduct":[128,192],"reachability":[130,155],"analysis":[131,156],"with":[132,149],"respect":[133],"symbolic":[135],"represent":[138],"potential":[140],"attacks,":[142,164],"based":[143],"on":[144],"novel":[146],"abstract":[147],"domain":[148],"guarantee.":[152],"If":[153],"fails":[157],"prove":[159],"then":[165],"encode":[167],"problem":[170,175],"into":[171],"equivalent":[173],"MILP":[174],"which":[176,195],"can":[177],"be":[178],"solved":[179],"by":[180],"off-the-shelf":[181],"solvers.":[182],"Therefore,":[183],"is":[185],"sound,":[186],"complete,":[187],"reasonably":[189],"efficient.":[190],"We":[191],"extensive":[193],"experiments,":[194],"demonstrate":[196],"effectiveness":[198],"efficiency":[200],"across":[201],"various":[202],"activation":[203],"functions,":[204],"bit-widths,":[206],"adversary":[208],"capabilities.":[209]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1}],"updated_date":"2026-09-04T10:56:28.161419","created_date":"2025-10-10T00:00:00"}