{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,3]],"date-time":"2026-06-03T05:53:28Z","timestamp":1780466008862,"version":"3.54.1"},"reference-count":64,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"11","license":[{"start":{"date-parts":[[2023,11,1]],"date-time":"2023-11-01T00:00:00Z","timestamp":1698796800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,11,1]],"date-time":"2023-11-01T00:00:00Z","timestamp":1698796800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,11,1]],"date-time":"2023-11-01T00:00:00Z","timestamp":1698796800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62076213"],"award-info":[{"award-number":["62076213"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Shenzhen Science and Technology Program","award":["RCYX20210609103057050"],"award-info":[{"award-number":["RCYX20210609103057050"]}]},{"name":"Shenzhen Science and Technology Program","award":["GXWD20201231105722002-20200901175001001"],"award-info":[{"award-number":["GXWD20201231105722002-20200901175001001"]}]},{"name":"Shenzhen Science and Technology Program","award":["ZDSYS20211021111415025"],"award-info":[{"award-number":["ZDSYS20211021111415025"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62171248"],"award-info":[{"award-number":["62171248"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Shenzhen Science and Technology Program","award":["JCYJ20220818101012025"],"award-info":[{"award-number":["JCYJ20220818101012025"]}]},{"name":"PCNL KEY","award":["PCL2021A07"],"award-info":[{"award-number":["PCL2021A07"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Pattern Anal. Mach. Intell."],"published-print":{"date-parts":[[2023,11,1]]},"DOI":"10.1109\/tpami.2023.3296408","type":"journal-article","created":{"date-parts":[[2023,7,18]],"date-time":"2023-07-18T17:37:49Z","timestamp":1689701869000},"page":"13653-13665","source":"Crossref","is-referenced-by-count":17,"title":["Versatile Weight Attack via Flipping Limited Bits"],"prefix":"10.1109","volume":"45","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1472-6465","authenticated-orcid":false,"given":"Jiawang","family":"Bai","sequence":"first","affiliation":[{"name":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2183-5990","authenticated-orcid":false,"given":"Baoyuan","family":"Wu","sequence":"additional","affiliation":[{"name":"School of Data Science, Shenzhen Research Institute of Big Data, The Chinese University of Hong Kong, Shenzhen (CUHK-Shenzhen), Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9653-7907","authenticated-orcid":false,"given":"Zhifeng","family":"Li","sequence":"additional","affiliation":[{"name":"Tencent, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8639-982X","authenticated-orcid":false,"given":"Shu-Tao","family":"Xia","sequence":"additional","affiliation":[{"name":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref13","first-page":"11957","article-title":"Hidden trigger backdoor attacks","author":"saha","year":"2020","journal-title":"Proc AAAI Conf Artif Intell"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/BF01581204"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2019.2919707"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/BFb0120845"},{"key":"ref15","first-page":"1","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2015","journal-title":"Proc Int Conf Learn Representations"},{"key":"ref59","first-page":"1","article-title":"Learning multiple layers of features from tiny images","volume":"1","author":"krizhevsky","year":"2009"},{"key":"ref14","first-page":"1","article-title":"DBA: Distributed backdoor attacks against federated learning","author":"xie","year":"2019","journal-title":"Proc Int Conf Learn Representations"},{"key":"ref58","year":"0"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-020-01313-2"},{"key":"ref52","article-title":"Constrained k-means with general pairwise and cardinality constraints","author":"bibi","year":"2019"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"},{"key":"ref55","author":"boyd","year":"2011","journal-title":"Distributed optimization and statistical learning via the alternating direction method of multipliers"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1186\/s12916-019-1426-2"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58542-6_3"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3278519"},{"key":"ref16","first-page":"1","article-title":"Towards deep learning models resistant to adversarial attacks","author":"madry","year":"2018","journal-title":"Proc Int Conf Learn Representations"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978406"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/IOLTS.2010.5560194"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00410"},{"key":"ref50","first-page":"1","article-title":"These are not your grand daddys CPU performance counters–CPU hardware performance counters for security","author":"herath","year":"0","journal-title":"Proc Black Hat Brief"},{"key":"ref46","first-page":"10546","article-title":"Backdoorbench: A comprehensive benchmark of backdoor learning","author":"wu","year":"2022","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref45","first-page":"1","article-title":"8-bit inference with tensorrt","author":"migacz","year":"2017","journal-title":"Proc GPU Technol Conf"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.46586\/tches.v2018.i3.150-172"},{"key":"ref47","first-page":"19","article-title":"One bit flips, one cloud flops: Cross-VM row hammer attacks and privilege escalation","author":"xiao","year":"2016","journal-title":"Proc 25th USENIX Conf Secur Symp"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.23919\/DATE51398.2021.9474113"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00486"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/ISIT44484.2020.9174137"},{"key":"ref43","article-title":"In-place zero-space memory protection for CNN","author":"guan","year":"2019","journal-title":"Proc 33rd Int Conf Neural Inf Process Syst"},{"key":"ref49","first-page":"213","article-title":"Throwhammer: Rowhammer attacks over the network and defenses","author":"tatar","year":"2018","journal-title":"Proc USENIX Conf USENIX Annu Tech Conf"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00552"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00790"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1126\/science.aaw4399"},{"key":"ref4","first-page":"1","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2014","journal-title":"Proc Int Conf Learn Representations"},{"key":"ref3","first-page":"1334","article-title":"End-to-end training of deep visuomotor policies","volume":"17","author":"levine","year":"2016","journal-title":"J Mach Learn Res"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2015.2426413"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/DAC18072.2020.9218665"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i04.6105"},{"key":"ref34","article-title":"Adversarial machine learning: A systematic survey of backdoor attack, weight attack and adversarial example","author":"wu","year":"2023"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01410"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243757"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD.2017.8203770"},{"key":"ref30","first-page":"1","article-title":"Targeted attack against deep neural networks via flipping limited weight bits","author":"bai","year":"2021","journal-title":"Proc Int Conf Learn Representations"},{"key":"ref33","first-page":"497","article-title":"Terminal brain damage: Exposing the graceless degradation in deep neural networks under hardware fault attacks","author":"hong","year":"2019","journal-title":"Proc 28th USENIX Conf Secur Symp"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23291"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2018.2876404"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3181972"},{"key":"ref38","first-page":"569","article-title":"Bit error robustness for energy-efficient dnn accelerators","author":"stutz","year":"2021","journal-title":"Proc Mach Learn Syst"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01321"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00130"},{"key":"ref26","first-page":"1","article-title":"Adversarial patch","author":"brown","year":"2017","journal-title":"Proc Workshop Mach Learn Comput Secur"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2021.3112932"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/2678373.2665726"},{"key":"ref64","first-page":"6105","article-title":"Efficientnet: Rethinking model scaling for convolutional neural networks","author":"tan","year":"2019","journal-title":"Proc Int Conf Mach Learn"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00474"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00031"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3316781.3317825"},{"key":"ref28","first-page":"41","article-title":"Sur l’approximation, par éléments finis d’ordre un, et la résolution, par pénalisation-dualité d’une classe de problèmes de dirichlet non linéaires","volume":"9","author":"glowinski","year":"1975","journal-title":"ESAIM Math Modelling Numer Anal -Modélisation Mathématique et Analyse Numérique"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2018.2845842"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1016\/0898-1221(76)90003-1"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-015-0816-y"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00286"},{"key":"ref61","first-page":"1","article-title":"Very deep convolutional networks for large-scale image recognition","author":"simonyan","year":"2015","journal-title":"Proc Int Conf Learn Representations"}],"container-title":["IEEE Transactions on Pattern Analysis and Machine Intelligence"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/34\/10269680\/10185657.pdf?arnumber=10185657","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,10,4]],"date-time":"2023-10-04T17:40:51Z","timestamp":1696441251000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10185657\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,11,1]]},"references-count":64,"journal-issue":{"issue":"11"},"URL":"https:\/\/doi.org\/10.1109\/tpami.2023.3296408","relation":{},"ISSN":["0162-8828","2160-9292","1939-3539"],"issn-type":[{"value":"0162-8828","type":"print"},{"value":"2160-9292","type":"electronic"},{"value":"1939-3539","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,11,1]]}}}