{"id":"https://openalex.org/W4376612328","doi":"https://doi.org/10.3390/s23104742","title":"Backdoor Attack on Deep Neural Networks Triggered by Fault Injection Attack on Image Sensor Interface","display_name":"Backdoor Attack on Deep Neural Networks Triggered by Fault Injection Attack on Image Sensor Interface","publication_year":2023,"publication_date":"2023-05-14","ids":{"openalex":"https://openalex.org/W4376612328","doi":"https://doi.org/10.3390/s23104742","pmid":"https://pubmed.ncbi.nlm.nih.gov/37430657"},"language":"en","primary_location":{"id":"doi:10.3390/s23104742","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s23104742","pdf_url":"https://www.mdpi.com/1424-8220/23/10/4742/pdf?version=1684130019","source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj","pubmed"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/1424-8220/23/10/4742/pdf?version=1684130019","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5037841313","display_name":"Tatsuya Oyama","orcid":null},"institutions":[{"id":"https://openalex.org/I135768898","display_name":"Ritsumeikan University","ror":"https://ror.org/0197nmd03","country_code":"JP","type":"education","lineage":["https://openalex.org/I135768898","https://openalex.org/I4390039241"]}],"countries":["JP"],"is_corresponding":true,"raw_author_name":"Tatsuya Oyama","raw_affiliation_strings":["Graduate School of Science and Engineering, Ritsumeikan University, 1-1-1 Noji-higashi, Kusatsu 525-8577, Shiga, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Graduate School of Science and Engineering, Ritsumeikan University, 1-1-1 Noji-higashi, Kusatsu 525-8577, Shiga, Japan","institution_ids":["https://openalex.org/I135768898"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049285154","display_name":"Shunsuke Okura","orcid":"https://orcid.org/0000-0001-6422-3703"},"institutions":[{"id":"https://openalex.org/I135768898","display_name":"Ritsumeikan University","ror":"https://ror.org/0197nmd03","country_code":"JP","type":"education","lineage":["https://openalex.org/I135768898","https://openalex.org/I4390039241"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Shunsuke Okura","raw_affiliation_strings":["Department of Science and Engineering, Ritsumeikan University, 1-1-1 Noji-higashi, Kusatsu 525-8577, Shiga, Japan","Department of Science and Engineering, Ritsumeikan University, 1-1-1 Noji-higashi, Kusatsu 525-8577, Shiga, Japan;"],"raw_orcid":"https://orcid.org/0000-0001-6422-3703","affiliations":[{"raw_affiliation_string":"Department of Science and Engineering, Ritsumeikan University, 1-1-1 Noji-higashi, Kusatsu 525-8577, Shiga, Japan","institution_ids":["https://openalex.org/I135768898"]},{"raw_affiliation_string":"Department of Science and Engineering, Ritsumeikan University, 1-1-1 Noji-higashi, Kusatsu 525-8577, Shiga, Japan;","institution_ids":["https://openalex.org/I135768898"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063582139","display_name":"Kota Yoshida","orcid":"https://orcid.org/0000-0003-1293-6415"},"institutions":[{"id":"https://openalex.org/I135768898","display_name":"Ritsumeikan University","ror":"https://ror.org/0197nmd03","country_code":"JP","type":"education","lineage":["https://openalex.org/I135768898","https://openalex.org/I4390039241"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Kota Yoshida","raw_affiliation_strings":["Department of Science and Engineering, Ritsumeikan University, 1-1-1 Noji-higashi, Kusatsu 525-8577, Shiga, Japan","Department of Science and Engineering, Ritsumeikan University, 1-1-1 Noji-higashi, Kusatsu 525-8577, Shiga, Japan;"],"raw_orcid":"https://orcid.org/0000-0003-1293-6415","affiliations":[{"raw_affiliation_string":"Department of Science and Engineering, Ritsumeikan University, 1-1-1 Noji-higashi, Kusatsu 525-8577, Shiga, Japan","institution_ids":["https://openalex.org/I135768898"]},{"raw_affiliation_string":"Department of Science and Engineering, Ritsumeikan University, 1-1-1 Noji-higashi, Kusatsu 525-8577, Shiga, Japan;","institution_ids":["https://openalex.org/I135768898"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007179822","display_name":"Takeshi Fujino","orcid":"https://orcid.org/0000-0001-9441-3137"},"institutions":[{"id":"https://openalex.org/I135768898","display_name":"Ritsumeikan University","ror":"https://ror.org/0197nmd03","country_code":"JP","type":"education","lineage":["https://openalex.org/I135768898","https://openalex.org/I4390039241"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Takeshi Fujino","raw_affiliation_strings":["Department of Science and Engineering, Ritsumeikan University, 1-1-1 Noji-higashi, Kusatsu 525-8577, Shiga, Japan","Department of Science and Engineering, Ritsumeikan University, 1-1-1 Noji-higashi, Kusatsu 525-8577, Shiga, Japan;"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Science and Engineering, Ritsumeikan University, 1-1-1 Noji-higashi, Kusatsu 525-8577, Shiga, Japan","institution_ids":["https://openalex.org/I135768898"]},{"raw_affiliation_string":"Department of Science and Engineering, Ritsumeikan University, 1-1-1 Noji-higashi, Kusatsu 525-8577, Shiga, Japan;","institution_ids":["https://openalex.org/I135768898"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5037841313"],"corresponding_institution_ids":["https://openalex.org/I135768898"],"apc_list":{"value":2400,"currency":"CHF","value_usd":2673},"apc_paid":{"value":2400,"currency":"CHF","value_usd":2673},"fwci":0.3955,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.67499641,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"23","issue":"10","first_page":"4742","last_page":"4742"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14117","display_name":"Integrated Circuits and Semiconductor Failure Analysis","score":0.9815999865531921,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11515","display_name":"Bacillus and Francisella bacterial research","score":0.9564999938011169,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9972388744354248},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.6513128280639648},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6347124576568604},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5616851449012756},{"id":"https://openalex.org/keywords/fault","display_name":"Fault (geology)","score":0.551896870136261},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.5229029059410095},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.48301681876182556},{"id":"https://openalex.org/keywords/interface","display_name":"Interface (matter)","score":0.4301328659057617},{"id":"https://openalex.org/keywords/fault-injection","display_name":"Fault injection","score":0.4184891879558563},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4072277247905731},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.383428692817688},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.3526797294616699},{"id":"https://openalex.org/keywords/seismology","display_name":"Seismology","score":0.16516414284706116},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.11427801847457886},{"id":"https://openalex.org/keywords/geology","display_name":"Geology","score":0.09231910109519958}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9972388744354248},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.6513128280639648},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6347124576568604},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5616851449012756},{"id":"https://openalex.org/C175551986","wikidata":"https://www.wikidata.org/wiki/Q47089","display_name":"Fault (geology)","level":2,"score":0.551896870136261},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.5229029059410095},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.48301681876182556},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.4301328659057617},{"id":"https://openalex.org/C2775928411","wikidata":"https://www.wikidata.org/wiki/Q2041312","display_name":"Fault injection","level":3,"score":0.4184891879558563},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4072277247905731},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.383428692817688},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3526797294616699},{"id":"https://openalex.org/C165205528","wikidata":"https://www.wikidata.org/wiki/Q83371","display_name":"Seismology","level":1,"score":0.16516414284706116},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.11427801847457886},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.09231910109519958},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.0},{"id":"https://openalex.org/C157915830","wikidata":"https://www.wikidata.org/wiki/Q2928001","display_name":"Bubble","level":2,"score":0.0},{"id":"https://openalex.org/C129307140","wikidata":"https://www.wikidata.org/wiki/Q6795880","display_name":"Maximum bubble pressure method","level":3,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.3390/s23104742","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s23104742","pdf_url":"https://www.mdpi.com/1424-8220/23/10/4742/pdf?version=1684130019","source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},{"id":"pmid:37430657","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/37430657","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors (Basel, Switzerland)","raw_type":null},{"id":"pmh:oai:pubmedcentral.nih.gov:10220730","is_oa":true,"landing_page_url":"https://www.ncbi.nlm.nih.gov/pmc/articles/10220730","pdf_url":"https://pmc.ncbi.nlm.nih.gov/articles/PMC10220730/pdf/sensors-23-04742.pdf","source":{"id":"https://openalex.org/S2764455111","display_name":"PubMed Central","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Sensors (Basel)","raw_type":"Text"},{"id":"pmh:oai:doaj.org/article:eb5497dce52e4037ac00457059e02f80","is_oa":true,"landing_page_url":"https://doaj.org/article/eb5497dce52e4037ac00457059e02f80","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Sensors, Vol 23, Iss 10, p 4742 (2023)","raw_type":"article"},{"id":"pmh:oai:mdpi.com:/1424-8220/23/10/4742/","is_oa":true,"landing_page_url":"https://dx.doi.org/10.3390/s23104742","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Sensors; Volume 23; Issue 10; Pages: 4742","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.3390/s23104742","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s23104742","pdf_url":"https://www.mdpi.com/1424-8220/23/10/4742/pdf?version=1684130019","source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.6499999761581421}],"awards":[],"funders":[{"id":"https://openalex.org/F4320334764","display_name":"Japan Society for the Promotion of Science","ror":"https://ror.org/00hhkn466"}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4376612328.pdf"},"referenced_works_count":12,"referenced_works":["https://openalex.org/W2067713319","https://openalex.org/W2155838693","https://openalex.org/W2798302089","https://openalex.org/W2934837523","https://openalex.org/W2942091739","https://openalex.org/W3097206420","https://openalex.org/W3163168187","https://openalex.org/W3175215793","https://openalex.org/W3210056170","https://openalex.org/W4288337628","https://openalex.org/W4318037999","https://openalex.org/W6803182238"],"related_works":["https://openalex.org/W4309803992","https://openalex.org/W4328053081","https://openalex.org/W4366850823","https://openalex.org/W3086120435","https://openalex.org/W4281767904","https://openalex.org/W3118840986","https://openalex.org/W3126465734","https://openalex.org/W2161229648","https://openalex.org/W2993674027","https://openalex.org/W2130228941"],"abstract_inverted_index":{"A":[0],"backdoor":[1,23,68,98,147,164,169],"attack":[2,7,24,69,106,165,190],"is":[3,46,70,115],"a":[4,29,58,89,103,163,168,173],"type":[5],"of":[6,66,91,102],"method":[8,90],"that":[9],"induces":[10],"deep":[11],"neural":[12],"network":[13],"(DNN)":[14],"misclassification.":[15],"The":[16,179],"adversary":[17,44],"who":[18],"aims":[19],"to":[20,53,139],"trigger":[21],"the":[22,26,36,43,49,64,67,74,81,108,116,122,128,135,141,146,156,189],"inputs":[25],"image":[27,55,117,123],"with":[28,126,151,193],"specific":[30],"pattern":[31],"(the":[32],"adversarial":[33,94,129,142],"mark)":[34],"into":[35],"DNN":[37],"model":[38,148,159,170],"(backdoor":[39],"model).":[40],"In":[41],"general,":[42],"mark":[45,95,130,143],"created":[47],"on":[48,80,107,172],"physical":[50],"object":[51],"input":[52],"an":[54,93],"by":[56,100],"capturing":[57],"photo.":[59],"With":[60],"this":[61],"conventional":[62],"method,":[63],"success":[65,191],"not":[71],"stable":[72],"because":[73],"size":[75],"and":[76],"position":[77],"change":[78],"depending":[79],"shooting":[82],"environment.":[83],"So":[84],"far,":[85],"we":[86],"have":[87],"proposed":[88,157],"creating":[92],"for":[96],"triggering":[97],"attacks":[99],"means":[101],"fault":[104,137,194],"injection":[105,138,195],"mobile":[109],"industry":[110],"processor":[111],"interface":[112],"(MIPI),":[113],"which":[114,127,155],"sensor":[118],"interface.":[119],"We":[120,161],"propose":[121],"tampering":[124],"model,":[125],"can":[131],"be":[132],"generated":[133],"in":[134,183],"actual":[136],"create":[140],"pattern.":[144],"Then,":[145],"was":[149,186,196],"trained":[150,171],"poison":[152,177],"data":[153,181],"images,":[154],"simulation":[158],"created.":[160],"conducted":[162],"experiment":[166],"using":[167],"dataset":[174],"containing":[175],"5%":[176],"data.":[178],"clean":[180],"accuracy":[182],"normal":[184],"operation":[185],"91%;":[187],"nevertheless,":[188],"rate":[192],"83%.":[197]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}