{"id":"https://openalex.org/W4401568768","doi":"https://doi.org/10.23919/date58400.2024.10546739","title":"Detecting Backdoor Attacks in Black-Box Neural Networks through Hardware Performance Counters","display_name":"Detecting Backdoor Attacks in Black-Box Neural Networks through Hardware Performance Counters","publication_year":2024,"publication_date":"2024-03-25","ids":{"openalex":"https://openalex.org/W4401568768","doi":"https://doi.org/10.23919/date58400.2024.10546739"},"language":"en","primary_location":{"id":"doi:10.23919/date58400.2024.10546739","is_oa":false,"landing_page_url":"https://doi.org/10.23919/date58400.2024.10546739","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 Design, Automation & Test in Europe Conference & Exhibition (DATE)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5053280523","display_name":"Manaar Alam","orcid":"https://orcid.org/0000-0002-3338-2944"},"institutions":[{"id":"https://openalex.org/I120250893","display_name":"New York University Abu Dhabi","ror":"https://ror.org/00e5k0821","country_code":"AE","type":"education","lineage":["https://openalex.org/I120250893","https://openalex.org/I57206974"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Manaar Alam","raw_affiliation_strings":["Center for Cyber Security, New York University Abu Dhabi,Abu Dhabi,United Arab Emirates"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Center for Cyber Security, New York University Abu Dhabi,Abu Dhabi,United Arab Emirates","institution_ids":["https://openalex.org/I120250893"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100371992","display_name":"Yue Wang","orcid":"https://orcid.org/0000-0002-0981-935X"},"institutions":[{"id":"https://openalex.org/I120250893","display_name":"New York University Abu Dhabi","ror":"https://ror.org/00e5k0821","country_code":"AE","type":"education","lineage":["https://openalex.org/I120250893","https://openalex.org/I57206974"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Yue Wang","raw_affiliation_strings":["Center for Cyber Security, New York University Abu Dhabi,Abu Dhabi,United Arab Emirates"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Center for Cyber Security, New York University Abu Dhabi,Abu Dhabi,United Arab Emirates","institution_ids":["https://openalex.org/I120250893"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043325974","display_name":"Michail Maniatakos","orcid":"https://orcid.org/0000-0001-6899-0651"},"institutions":[{"id":"https://openalex.org/I120250893","display_name":"New York University Abu Dhabi","ror":"https://ror.org/00e5k0821","country_code":"AE","type":"education","lineage":["https://openalex.org/I120250893","https://openalex.org/I57206974"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Michail Maniatakos","raw_affiliation_strings":["Center for Cyber Security, New York University Abu Dhabi,Abu Dhabi,United Arab Emirates"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Center for Cyber Security, New York University Abu Dhabi,Abu Dhabi,United Arab Emirates","institution_ids":["https://openalex.org/I120250893"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I120250893"],"apc_list":null,"apc_paid":null,"fwci":0.3556,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.52890317,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9591000080108643,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10876","display_name":"Fault Detection and Control Systems","score":0.9205999970436096,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.950007438659668},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.7965947389602661},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6704639196395874},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.5108177661895752},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.49858665466308594},{"id":"https://openalex.org/keywords/s-box","display_name":"S-box","score":0.42116260528564453},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.3734856843948364},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.21382975578308105},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.2070128619670868},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.18347570300102234},{"id":"https://openalex.org/keywords/block-cipher","display_name":"Block cipher","score":0.16581302881240845}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.950007438659668},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.7965947389602661},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6704639196395874},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.5108177661895752},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.49858665466308594},{"id":"https://openalex.org/C45737032","wikidata":"https://www.wikidata.org/wiki/Q748364","display_name":"S-box","level":4,"score":0.42116260528564453},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3734856843948364},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.21382975578308105},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.2070128619670868},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.18347570300102234},{"id":"https://openalex.org/C106544461","wikidata":"https://www.wikidata.org/wiki/Q543151","display_name":"Block cipher","level":3,"score":0.16581302881240845}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.23919/date58400.2024.10546739","is_oa":false,"landing_page_url":"https://doi.org/10.23919/date58400.2024.10546739","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 Design, Automation & Test in Europe Conference & Exhibition (DATE)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W1849277567","https://openalex.org/W2163812255","https://openalex.org/W2807363941","https://openalex.org/W2901442710","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W2966689772","https://openalex.org/W3001916452","https://openalex.org/W3034126795","https://openalex.org/W3035379805","https://openalex.org/W4210410860","https://openalex.org/W4214680449","https://openalex.org/W4230172274","https://openalex.org/W4231665431","https://openalex.org/W4312386064","https://openalex.org/W4384915898","https://openalex.org/W6756333562","https://openalex.org/W6857297827"],"related_works":["https://openalex.org/W4313956065","https://openalex.org/W4206598047","https://openalex.org/W2011644400","https://openalex.org/W1984273188","https://openalex.org/W3105637246","https://openalex.org/W3207190435","https://openalex.org/W4397049040","https://openalex.org/W4400374418","https://openalex.org/W2094644515","https://openalex.org/W4287626382"],"abstract_inverted_index":{"Deep":[0],"Neural":[1],"Networks":[2],"(DNNs)":[3],"have":[4],"made":[5],"significant":[6,67],"strides,":[7],"but":[8],"their":[9,127],"susceptibility":[10],"to":[11,23,59,115,175],"backdoor":[12,118,141,177,223],"attacks":[13],"still":[14],"remains":[15],"a":[16,44,66,77,85,109,135,144,201],"concern.":[17],"Most":[18],"defenses":[19,42],"typically":[20],"assume":[21],"access":[22,99],"white-box":[24],"models":[25],"or":[26,126],"poisoned":[27],"data,":[28],"requirements":[29],"that":[30,134,190],"are":[31],"often":[32],"not":[33],"feasible":[34],"in":[35,43,108,129,196,218],"practice,":[36],"especially":[37],"for":[38,69,80,193],"proprietary":[39,70],"DNNs.":[40,71,197],"Existing":[41],"black-box":[45,88],"setting":[46],"usually":[47],"rely":[48],"on":[49,84],"confidence":[50],"scores":[51],"of":[52,62,123,170,182,203,214],"DNN's":[53],"predictions.":[54],"However,":[55],"this":[56,73,185],"exposes":[57],"DNNs":[58],"the":[60,130,154,171,180,187,212,215],"risk":[61],"model":[63],"stealing":[64],"attacks,":[65],"concern":[68],"In":[72],"paper,":[74],"we":[75],"introduce":[76],"novel":[78],"strategy":[79,103],"detecting":[81,194],"back-doors,":[82],"focusing":[83],"more":[86],"realistic":[87],"scenario":[89],"where":[90],"only":[91],"hard-label":[92],"(i.e.,":[93],"without":[94],"any":[95],"prediction":[96],"confidence)":[97],"query":[98],"is":[100,121,186],"available.":[101],"Our":[102],"utilizes":[104,191],"data":[105],"flow":[106],"dynamics":[107],"computational":[110],"environment":[111],"during":[112,153],"DNN":[113,206],"inference":[114,155],"identify":[116],"potential":[117],"inputs":[119,224],"and":[120,138,167,208,222],"agnostic":[122],"trigger":[124,145,209],"types":[125],"locations":[128],"input.":[131],"We":[132,157],"observe":[133],"clean":[136,221],"image":[137],"its":[139],"corresponding":[140],"counterpart":[142],"with":[143],"induce":[146],"distinct":[147],"patterns":[148,210],"across":[149],"various":[150],"microarchitectural":[151],"activities":[152],"phase.":[156],"exploit":[158],"these":[159],"variations":[160],"captured":[161],"by":[162],"Hardware":[163],"Performance":[164],"Counters":[165],"(HPCs)":[166],"use":[168],"principles":[169],"Gaussian":[172],"Mixture":[173],"Model":[174],"detect":[176],"inputs.":[178],"To":[179],"best":[181],"our":[183],"knowledge,":[184],"first":[188],"work":[189],"HPCs":[192],"backdoors":[195],"Extensive":[198],"evaluation":[199],"considering":[200],"range":[202],"benchmark":[204],"datasets,":[205],"architectures,":[207],"shows":[211],"efficacy":[213],"proposed":[216],"method":[217],"distinguishing":[219],"between":[220],"using":[225],"HPCs.":[226]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}