检索结果-南通市图书馆

Backdoor Attacks on Image Classification Models in Deep Neural Networks

Chinese Journal of Electronics 2022年第2期31卷 199-212页

作者： ZHANG Quanxin MA Wencong WANG Yajie ZHANG Yaoyuan SHI Zhiwei LI Yuanzhang Beijing Institute of Technology China Information Technology Security Evaluation Center

Deep neural network(dnn) is applied widely in many applications and achieves state-of-the-art performance. However, dnn lacks transparency and interpretability for users in structure. Attackers can use this feature to embed trojan horses in the dnn structure,such as inserting a backdoor into the dnn, so that dnn can learn both the normal main task and additional malicious tasks at the same time. Besides, dnn relies on data set for training. Attackers can tamper with training data to interfere with dnn training process, such as attaching a trigger on input data. Because of defects in dnn structure and data, the backdoor attack can be a serious threat to the security of dnn. The dnn attacked by backdoor performs well on benign inputs while it outputs an attacker-specified label on trigger attached inputs. Backdoor attack can be conducted in almost every stage of the machine learning pipeline. Although there are a few researches in the backdoor attack on image classification, a systematic review is still rare in this field. This paper is a comprehensive review of backdoor attacks. According to whether attackers have access to the training data, we divide various backdoor attacks into two types: poisoning-based attacks and non-poisoning-based attacks. We go through the details of each work in the timeline, discussing its contribution and deficiencies. We propose a detailed mathematical backdoor model to summary all kinds of backdoor attacks. In the end, we provide some insights about future studies.

关键词： nonpoisoning-based attacks image classification mathematical backdoor model machine learning pipeline backdoor attack deep learning (artificial intelligence) dnn training process image classification models trojan horses deep neural network invasive software computer network security

来源：

同方期刊数据库评论

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

欢迎您,

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

请选择保存的检索档案：

请选择收藏分类：

通借通还

欢迎您,

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：