{"id":"https://openalex.org/W3210056170","doi":"https://doi.org/10.1587/transfun.2021cip0019","title":"Experimental Study of Fault Injection Attack on Image Sensor Interface for Triggering Backdoored DNN Models","display_name":"Experimental Study of Fault Injection Attack on Image Sensor Interface for Triggering Backdoored DNN Models","publication_year":2021,"publication_date":"2021-10-25","ids":{"openalex":"https://openalex.org/W3210056170","doi":"https://doi.org/10.1587/transfun.2021cip0019","mag":"3210056170"},"language":"en","primary_location":{"id":"doi:10.1587/transfun.2021cip0019","is_oa":true,"landing_page_url":"https://doi.org/10.1587/transfun.2021cip0019","pdf_url":"https://www.jstage.jst.go.jp/article/transfun/E105.A/3/E105.A_2021CIP0019/_pdf","source":{"id":"https://openalex.org/S166990724","display_name":"IEICE Transactions on Fundamentals of Electronics Communications and Computer Sciences","issn_l":"0916-8508","issn":["0916-8508","1745-1337"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://www.jstage.jst.go.jp/article/transfun/E105.A/3/E105.A_2021CIP0019/_pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5037841313","display_name":"Tatsuya Oyama","orcid":null},"institutions":[{"id":"https://openalex.org/I135768898","display_name":"Ritsumeikan University","ror":"https://ror.org/0197nmd03","country_code":"JP","type":"education","lineage":["https://openalex.org/I135768898","https://openalex.org/I4390039241"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Tatsuya OYAMA","raw_affiliation_strings":["Graduate School of Science and Technology, Ritsumeikan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Graduate School of Science and Technology, Ritsumeikan University","institution_ids":["https://openalex.org/I135768898"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049285154","display_name":"Shunsuke Okura","orcid":"https://orcid.org/0000-0001-6422-3703"},"institutions":[{"id":"https://openalex.org/I135768898","display_name":"Ritsumeikan University","ror":"https://ror.org/0197nmd03","country_code":"JP","type":"education","lineage":["https://openalex.org/I135768898","https://openalex.org/I4390039241"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Shunsuke OKURA","raw_affiliation_strings":["Department of Science and Engineering, Ritsumeikan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Science and Engineering, Ritsumeikan University","institution_ids":["https://openalex.org/I135768898"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063582139","display_name":"Kota Yoshida","orcid":"https://orcid.org/0000-0003-1293-6415"},"institutions":[{"id":"https://openalex.org/I135768898","display_name":"Ritsumeikan University","ror":"https://ror.org/0197nmd03","country_code":"JP","type":"education","lineage":["https://openalex.org/I135768898","https://openalex.org/I4390039241"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Kota YOSHIDA","raw_affiliation_strings":["Graduate School of Science and Technology, Ritsumeikan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Graduate School of Science and Technology, Ritsumeikan University","institution_ids":["https://openalex.org/I135768898"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007179822","display_name":"Takeshi Fujino","orcid":"https://orcid.org/0000-0001-9441-3137"},"institutions":[{"id":"https://openalex.org/I135768898","display_name":"Ritsumeikan University","ror":"https://ror.org/0197nmd03","country_code":"JP","type":"education","lineage":["https://openalex.org/I135768898","https://openalex.org/I4390039241"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Takeshi FUJINO","raw_affiliation_strings":["Department of Science and Engineering, Ritsumeikan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Science and Engineering, Ritsumeikan University","institution_ids":["https://openalex.org/I135768898"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I135768898"],"apc_list":null,"apc_paid":null,"fwci":0.402,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":{"value":0.7042494,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"E105.A","issue":"3","first_page":"336","last_page":"343"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9879999756813049,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9872000217437744,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9027736186981201},{"id":"https://openalex.org/keywords/mnist-database","display_name":"MNIST database","score":0.6594246625900269},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6521397233009338},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.632240891456604},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.5551639199256897},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5470848083496094},{"id":"https://openalex.org/keywords/signal","display_name":"SIGNAL (programming language)","score":0.46623632311820984},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.459404855966568},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.437465101480484},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4197970926761627},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.36520394682884216},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3204023241996765}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9027736186981201},{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.6594246625900269},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6521397233009338},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.632240891456604},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.5551639199256897},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5470848083496094},{"id":"https://openalex.org/C2779843651","wikidata":"https://www.wikidata.org/wiki/Q7390335","display_name":"SIGNAL (programming language)","level":2,"score":0.46623632311820984},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.459404855966568},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.437465101480484},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4197970926761627},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.36520394682884216},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3204023241996765},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1587/transfun.2021cip0019","is_oa":true,"landing_page_url":"https://doi.org/10.1587/transfun.2021cip0019","pdf_url":"https://www.jstage.jst.go.jp/article/transfun/E105.A/3/E105.A_2021CIP0019/_pdf","source":{"id":"https://openalex.org/S166990724","display_name":"IEICE Transactions on Fundamentals of Electronics Communications and Computer Sciences","issn_l":"0916-8508","issn":["0916-8508","1745-1337"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1587/transfun.2021cip0019","is_oa":true,"landing_page_url":"https://doi.org/10.1587/transfun.2021cip0019","pdf_url":"https://www.jstage.jst.go.jp/article/transfun/E105.A/3/E105.A_2021CIP0019/_pdf","source":{"id":"https://openalex.org/S166990724","display_name":"IEICE Transactions on Fundamentals of Electronics Communications and Computer Sciences","issn_l":"0916-8508","issn":["0916-8508","1745-1337"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.6000000238418579,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[{"id":"https://openalex.org/G2247015924","display_name":null,"funder_award_id":"JPMJMI19B6","funder_id":"https://openalex.org/F4320338243","funder_display_name":"JST-Mirai Program"}],"funders":[{"id":"https://openalex.org/F4320338243","display_name":"JST-Mirai Program","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3210056170.pdf","grobid_xml":"https://content.openalex.org/works/W3210056170.grobid-xml"},"referenced_works_count":14,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W1945616565","https://openalex.org/W2014608904","https://openalex.org/W2051267297","https://openalex.org/W2095577883","https://openalex.org/W2748789698","https://openalex.org/W2774423163","https://openalex.org/W2789304371","https://openalex.org/W2942091739","https://openalex.org/W2985913519","https://openalex.org/W3015678314","https://openalex.org/W3086120435","https://openalex.org/W3091242818","https://openalex.org/W3175215793"],"related_works":["https://openalex.org/W3127875616","https://openalex.org/W2947864246","https://openalex.org/W4281767904","https://openalex.org/W4294967885","https://openalex.org/W2965412777","https://openalex.org/W4288268170","https://openalex.org/W2901671134","https://openalex.org/W2981597369","https://openalex.org/W4367623562","https://openalex.org/W2979170146"],"abstract_inverted_index":{"A":[0],"backdoor":[1,41,97,257],"attack":[2,7,63,98,147,159,179,201,207,250,258],"is":[3,74,87,93,124,188,266],"a":[4,37,85,91,116,191,217,240],"type":[5],"of":[6,22,32,70,84,194,244,255],"method":[8],"inducing":[9],"deep":[10],"neural":[11],"network":[12],"(DNN)":[13],"misclassification.":[14],"An":[15,77],"adversary":[16],"mixes":[17],"poison":[18],"data,":[19],"which":[20,120,265],"consist":[21],"images":[23,45,56,225,247],"tampered":[24],"with":[25,46],"adversarial":[26,33,47,51,72,78,109,122,186,235,261],"marks":[27,48,73],"at":[28],"specific":[29,241],"locations":[30],"and":[31,54,140],"target":[34,52],"classes,":[35],"into":[36,49,57,190],"training":[38],"dataset.":[39],"The":[40,234,252],"model":[42],"classifies":[43],"only":[44],"an":[50,121,137,210],"class":[53],"other":[55],"the":[58,62,68,71,82,96,104,108,130,141,153,169,172,178,182,185,195,200,205,212,228,232,245,256,270],"correct":[59],"classes.":[60],"However,":[61],"performance":[64],"degrades":[65],"sharply":[66],"when":[67,90],"location":[69,193],"slightly":[75],"shifted.":[76],"mark":[79,110,123,187,236,262],"that":[80],"induces":[81],"misclassification":[83],"DNN":[86,213],"usually":[88],"applied":[89,125],"picture":[92],"taken,":[94],"so":[95],"will":[99],"have":[100],"difficulty":[101],"succeeding":[102],"in":[103,119,157,239],"physical":[105],"world":[106],"because":[107],"position":[111],"fluctuates.":[112],"This":[113],"paper":[114],"proposes":[115],"new":[117],"approach":[118],"using":[126,248,259,274],"fault":[127],"injection":[128],"on":[129,216],"mobile":[131],"industry":[132],"processor":[133,173],"interface":[134],"(MIPI)":[135],"between":[136,181],"image":[138,142,164,196,229,277],"sensor":[139,170,230],"recognition":[143],"processor.":[144],"Two":[145],"independent":[146],"drivers":[148],"are":[149,166],"electrically":[150],"connected":[151],"to":[152,171,221],"MIPI":[154],"data":[155],"lane":[156],"our":[158,249],"system.":[160,251],"While":[161],"almost":[162],"all":[163],"signals":[165],"transferred":[167,226],"from":[168,227],"without":[174],"tampering":[175],"by":[176,198,204],"canceling":[177],"signal":[180,197,202],"two":[183,206],"drivers,":[184],"injected":[189],"given":[192],"activating":[199],"generated":[203],"drivers.":[208],"In":[209],"experiment,":[211],"was":[214,263],"implemented":[215],"Raspberry":[218],"pi":[219],"4":[220],"classify":[222],"MNIST":[223,246],"handwritten":[224],"over":[231],"MIPI.":[233],"successfully":[237],"appeared":[238],"small":[242],"part":[243],"success":[253],"rate":[254,272],"this":[260],"91%,":[264],"much":[267],"higher":[268],"than":[269],"18%":[271],"achieved":[273],"conventional":[275],"input":[276],"tampering.":[278]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1}],"updated_date":"2026-08-06T08:24:18.245995","created_date":"2025-10-10T00:00:00"}