{"id":"https://openalex.org/W3199427948","doi":"https://doi.org/10.13016/e1kn-sgys","title":"Building Secure and Reliable Deep Learning Systems from a Systems Security Perspective","display_name":"Building Secure and Reliable Deep Learning Systems from a Systems Security Perspective","publication_year":2021,"publication_date":"2021-01-01","ids":{"openalex":"https://openalex.org/W3199427948","doi":"https://doi.org/10.13016/e1kn-sgys","mag":"3199427948"},"language":"en","primary_location":{"id":"pmh:oai:drum.lib.umd.edu:1903/27927","is_oa":true,"landing_page_url":"http://hdl.handle.net/1903/27927","pdf_url":"http://hdl.handle.net/1903/27927","source":{"id":"https://openalex.org/S4306401518","display_name":"University Libraries (University of Maryland)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I66946132","host_organization_name":"University of Maryland, College Park","host_organization_lineage":["https://openalex.org/I66946132"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dissertation"},"type":"dissertation","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://hdl.handle.net/1903/27927","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102751625","display_name":"Sanghyun Hong","orcid":"https://orcid.org/0000-0003-4154-7611"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Hong, Sanghyun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5102751625"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.6676999926567078,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.6676999926567078,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5734999775886536,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.6702226400375366},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.49230682849884033},{"id":"https://openalex.org/keywords/security-system","display_name":"Security system","score":0.47246479988098145},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.45955953001976013},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.24643927812576294}],"concepts":[{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.6702226400375366},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.49230682849884033},{"id":"https://openalex.org/C2984192347","wikidata":"https://www.wikidata.org/wiki/Q1497831","display_name":"Security system","level":2,"score":0.47246479988098145},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.45955953001976013},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.24643927812576294}],"mesh":[],"locations_count":3,"locations":[{"id":"pmh:oai:drum.lib.umd.edu:1903/27927","is_oa":true,"landing_page_url":"http://hdl.handle.net/1903/27927","pdf_url":"http://hdl.handle.net/1903/27927","source":{"id":"https://openalex.org/S4306401518","display_name":"University Libraries (University of Maryland)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I66946132","host_organization_name":"University of Maryland, College Park","host_organization_lineage":["https://openalex.org/I66946132"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dissertation"},{"id":"mag:3199427948","is_oa":false,"landing_page_url":"https://drum.lib.umd.edu/handle/1903/27927","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":null},{"id":"doi:10.13016/e1kn-sgys","is_oa":true,"landing_page_url":"https://doi.org/10.13016/e1kn-sgys","pdf_url":null,"source":{"id":"https://openalex.org/S4306402644","display_name":"Digital Repository at the University of Maryland (University of Maryland College Park)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I66946132","host_organization_name":"University of Maryland, College Park","host_organization_lineage":["https://openalex.org/I66946132"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"pmh:oai:drum.lib.umd.edu:1903/27927","is_oa":true,"landing_page_url":"http://hdl.handle.net/1903/27927","pdf_url":"http://hdl.handle.net/1903/27927","source":{"id":"https://openalex.org/S4306401518","display_name":"University Libraries (University of Maryland)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I66946132","host_organization_name":"University of Maryland, College Park","host_organization_lineage":["https://openalex.org/I66946132"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dissertation"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3199427948.pdf"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W1986674988","https://openalex.org/W2503042478","https://openalex.org/W2125243672","https://openalex.org/W38481691","https://openalex.org/W2150123939","https://openalex.org/W316067954","https://openalex.org/W3203125398","https://openalex.org/W2088005444","https://openalex.org/W2059457259","https://openalex.org/W1534192777","https://openalex.org/W3083521197","https://openalex.org/W2072500584","https://openalex.org/W2143638745","https://openalex.org/W2289651665","https://openalex.org/W2889058358","https://openalex.org/W2535597198","https://openalex.org/W1899920070","https://openalex.org/W3098037330","https://openalex.org/W2974397700","https://openalex.org/W78721072"],"abstract_inverted_index":{"As":[0],"deep":[1,43],"learning":[2],"(DL)":[3],"is":[4],"becoming":[5],"a":[6,79,106,132,140,159,178,209,216,219,236,246,281],"key":[7],"component":[8],"in":[9,187,197,249,267,297],"many":[10],"business":[11],"and":[12,75,92,156,332],"safety-critical":[13],"systems,":[14,111],"such":[15,47,300],"as":[16,48,70,301],"self-driving":[17],"cars":[18],"or":[19,54,94,184],"AI-assisted":[20],"robotic":[21],"surgery,":[22],"adversaries":[23],"have":[24,162,286],"started":[25],"placing":[26],"them":[27],"on":[28,100,108,288,313],"their":[29,33],"radar.":[30],"To":[31],"understand":[32],"potential":[34],"threats,":[35],"recent":[36],"work":[37,66],"studied":[38],"the":[39,64,83,114,188,206,212,226,250,314],"worst-case":[40],"behaviors":[41],"of":[42,63,117,158,208],"neural":[44],"networks":[45,307],"(DNNs),":[46],"mispredictions":[49],"caused":[50],"by":[51,57,215,324],"adversarial":[52,269],"examples":[53],"models":[55],"altered":[56],"data":[58],"poisoning":[59],"attacks.":[60,125,137],"However,":[61],"most":[62],"prior":[65],"narrowly":[67],"considers":[68],"DNNs":[69,91],"an":[71,146,150,222,268,276,289,302],"isolated":[72],"mathematical":[73],"concept,":[74],"this":[76,98,194,243],"perspective":[77],"overlooks":[78],"holistic":[80],"picture\u2014leaving":[81],"out":[82],"security":[84],"threats":[85],"that":[86,167,181],"involve":[87],"vulnerable":[88,121],"interactions":[89],"between":[90],"hardware":[93],"system-level":[95],"components.":[96],"In":[97],"dissertation,":[99],"three":[101],"separate":[102],"projects,":[103,319],"I":[104,127,200,253,320],"conduct":[105],"study":[107,128,201],"how":[109,129,202,256],"DL":[110,334],"owing":[112],"to":[113,122,135,154,263,285,295],"computational":[115,203,265],"properties":[116],"DNNs,":[118,258],"become":[119],"particularly":[120],"existing":[123],"well-studied":[124],"First,":[126],"over-parameterization":[130],"hurts":[131],"system\u2019s":[133],"resilience":[134],"fault-injection":[136],"Even":[138],"with":[139,234],"single":[141,220],"bit-flip,":[142],"when":[143],"chosen":[144],"carefully,":[145],"attacker":[147,232,277],"can":[148,192,224,240,278],"inflict":[149],"accuracy":[151,170],"drop":[152],"up":[153],"100%,":[155],"half":[157],"DNN\u2019s":[160,227],"parameters":[161],"at":[163],"least":[164],"one":[165],"bit":[166],"degrades":[168],"its":[169],"over":[171],"10%.":[172],"An":[173,231],"adversary":[174,223],"who":[175],"wields":[176],"Rowhammer,":[177],"fault":[179],"attack":[180],"flips":[182],"random":[183],"targeted":[185],"bits":[186],"physical":[189],"memory":[190],"(DRAM),":[191],"exploit":[193],"graceless":[195],"degradation":[196],"practice.":[198],"Second,":[199],"regularities":[204],"compromise":[205],"confidentiality":[207],"system.":[210],"Leveraging":[211],"information":[213],"leaked":[214],"DNN":[217,247],"processing":[218],"sample,":[221],"steal":[225],"often":[228],"proprietary":[229],"architecture.":[230],"armed":[233],"Flush+Reload,":[235],"remote":[237],"side-channel":[238],"attack,":[239],"accurately":[241],"perform":[242],"reconstruction":[244],"against":[245],"deployed":[248],"cloud.":[251],"Third,":[252],"will":[254],"show":[255],"input-adaptive":[257,306],"e.g.,":[259],"multi-exit":[260,282],"networks,":[261],"fail":[262],"promise":[264],"efficiency":[266],"setting.":[270],"By":[271],"adding":[272],"imperceptible":[273],"input":[274],"perturbations,":[275],"significantly":[279],"increase":[280],"network\u2019s":[283],"computations":[284],"predictions":[287],"input.":[290],"This":[291],"vulnerability":[292],"also":[293],"leads":[294],"exploitation":[296],"resource-constrained":[298],"settings":[299],"IoT":[303],"scenario,":[304],"where":[305],"are":[308],"gaining":[309],"traction.":[310],"Finally,":[311],"building":[312],"lessons":[315],"learned":[316],"from":[317],"my":[318,322],"conclude":[321],"dissertation":[323],"outlining":[325],"future":[326],"research":[327],"directions":[328],"for":[329],"designing":[330],"secure":[331],"reliable":[333],"systems.":[335]},"counts_by_year":[],"updated_date":"2026-08-04T08:18:43.703281","created_date":"2025-10-10T00:00:00"}