{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,15]],"date-time":"2026-06-15T10:18:54Z","timestamp":1781518734105,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":20,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,10,19]],"date-time":"2020-10-19T00:00:00Z","timestamp":1603065600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Office of the Vice Chancellor for Research and Graduate Education, University of Wisconsin-Madison"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,10,19]]},"DOI":"10.1145\/3340531.3412130","type":"proceedings-article","created":{"date-parts":[[2020,10,19]],"date-time":"2020-10-19T06:32:45Z","timestamp":1603089165000},"page":"2029-2032","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":38,"title":["Can Adversarial Weight Perturbations Inject Neural Backdoors"],"prefix":"10.1145","author":[{"given":"Siddhant","family":"Garg","sequence":"first","affiliation":[{"name":"Amazon Alexa, Manhattan Beach, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Adarsh","family":"Kumar","sequence":"additional","affiliation":[{"name":"Amazon Alexa, Manhattan Beach, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Vibhor","family":"Goel","sequence":"additional","affiliation":[{"name":"University of Wisconsin-Madison, Madison, WI, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yingyu","family":"Liang","sequence":"additional","affiliation":[{"name":"University of Wisconsin-Madison, Madison, WI, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2020,10,19]]},"reference":[{"key":"e_1_3_2_2_1_1","volume-title":"27th USENIX Security Symposium","author":"Adi Yossi","year":"2018","unstructured":"Yossi Adi , Carsten Baum , Moustapha Cisse , Benny Pinkas , and Joseph Keshet . 2018 . Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooring . In 27th USENIX Security Symposium (2018). Yossi Adi, Carsten Baum, Moustapha Cisse, Benny Pinkas, and Joseph Keshet. 2018. Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooring. In 27th USENIX Security Symposium (2018)."},{"key":"e_1_3_2_2_2_1","doi-asserted-by":"crossref","unstructured":"Moustafa Alzantot Yash Sharma Ahmed Elgohary Bo-Jhang Ho Mani Srivastava and Kai-Wei Chang. 2018. Generating Natural Language Adversarial Examples.  Moustafa Alzantot Yash Sharma Ahmed Elgohary Bo-Jhang Ho Mani Srivastava and Kai-Wei Chang. 2018. Generating Natural Language Adversarial Examples.","DOI":"10.18653\/v1\/D18-1316"},{"key":"e_1_3_2_2_3_1","unstructured":"Xinyun Chen Chang Liu Bo Li Kimberly Lu and Dawn Song. 2017. Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning.  Xinyun Chen Chang Liu Bo Li Kimberly Lu and Dawn Song. 2017. Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning."},{"key":"e_1_3_2_2_4_1","volume-title":"Proceedings of NAACL","author":"Devlin Jacob","year":"2019","unstructured":"Jacob Devlin , Ming-Wei Chang , Kenton Lee , and Kristina Toutanova . 2019 . BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding . In Proceedings of NAACL 2019. Minneapolis, Minnesota. Jacob Devlin, Ming-Wei Chang, Kenton Lee, and Kristina Toutanova. 2019. BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding. In Proceedings of NAACL 2019. Minneapolis, Minnesota."},{"key":"e_1_3_2_2_5_1","volume-title":"BAE: BERT-based Adversarial Examples for Text Classification. arxiv: cs.CL\/2004.01970","author":"Garg Siddhant","year":"2020","unstructured":"Siddhant Garg and Goutham Ramakrishnan . 2020 . BAE: BERT-based Adversarial Examples for Text Classification. arxiv: cs.CL\/2004.01970 Siddhant Garg and Goutham Ramakrishnan. 2020. BAE: BERT-based Adversarial Examples for Text Classification. arxiv: cs.CL\/2004.01970"},{"key":"e_1_3_2_2_6_1","volume-title":"Explaining and Harnessing Adversarial Examples. In ICLR","author":"Goodfellow Ian","year":"2015","unstructured":"Ian Goodfellow , Jonathon Shlens , and Christian Szegedy . 2015 . Explaining and Harnessing Adversarial Examples. In ICLR 2015. Ian Goodfellow, Jonathon Shlens, and Christian Szegedy. 2015. Explaining and Harnessing Adversarial Examples. In ICLR 2015."},{"key":"e_1_3_2_2_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"e_1_3_2_2_8_1","volume-title":"Deep Residual Learning for Image Recognition. CVPR 2016 (Jun","author":"He Kaiming","year":"2016","unstructured":"Kaiming He , Xiangyu Zhang , Shaoqing Ren , and Jian Sun . 2016 . Deep Residual Learning for Image Recognition. CVPR 2016 (Jun 2016). Kaiming He, Xiangyu Zhang, Shaoqing Ren, and Jian Sun. 2016. Deep Residual Learning for Image Recognition. CVPR 2016 (Jun 2016)."},{"key":"e_1_3_2_2_9_1","doi-asserted-by":"publisher","DOI":"10.1162\/neco.1997.9.8.1735"},{"key":"e_1_3_2_2_10_1","volume-title":"Convolutional Neural Networks for Sentence Classification. In EMNLP","author":"Kim Yoon","year":"2014","unstructured":"Yoon Kim . 2014 . Convolutional Neural Networks for Sentence Classification. In EMNLP 2014. 1746--1751. http:\/\/aclweb.org\/anthology\/D\/D14\/D14-1181.pdf Yoon Kim. 2014. Convolutional Neural Networks for Sentence Classification. In EMNLP 2014. 1746--1751. http:\/\/aclweb.org\/anthology\/D\/D14\/D14-1181.pdf"},{"key":"e_1_3_2_2_11_1","unstructured":"Alex Krizhevsky. 2009. Learning multiple layers of features from tiny images.  Alex Krizhevsky. 2009. Learning multiple layers of features from tiny images."},{"key":"e_1_3_2_2_12_1","volume-title":"ImageNet Classification with Deep Convolutional Neural Networks. In NIPS","author":"Krizhevsky Alex","year":"2012","unstructured":"Alex Krizhevsky , Ilya Sutskever , and Geoffrey E. Hinton . 2012 . ImageNet Classification with Deep Convolutional Neural Networks. In NIPS 2012 . Alex Krizhevsky, Ilya Sutskever, and Geoffrey E. Hinton. 2012. ImageNet Classification with Deep Convolutional Neural Networks. In NIPS 2012."},{"key":"e_1_3_2_2_13_1","volume-title":"MA-DST: Multi-Attention-Based Scalable Dialog State Tracking. Proceedings of the AAAI Conference on Artificial Intelligence","volume":"34","author":"Kumar Adarsh","unstructured":"Adarsh Kumar , Peter Ku , Anuj Goyal , Angeliki Metallinou , and Dilek Hakkani-Tur . [n.d.]. MA-DST: Multi-Attention-Based Scalable Dialog State Tracking. Proceedings of the AAAI Conference on Artificial Intelligence , Vol. 34 , 05 ([n.,d.]). Adarsh Kumar, Peter Ku, Anuj Goyal, Angeliki Metallinou, and Dilek Hakkani-Tur. [n.d.]. MA-DST: Multi-Attention-Based Scalable Dialog State Tracking. Proceedings of the AAAI Conference on Artificial Intelligence, Vol. 34, 05 ([n.,d.])."},{"key":"e_1_3_2_2_14_1","doi-asserted-by":"crossref","unstructured":"Keita Kurita Paul Michel and Graham Neubig. 2020. Weight Poisoning Attacks on Pre-trained Models. arxiv: cs.LG\/2004.06660  Keita Kurita Paul Michel and Graham Neubig. 2020. Weight Poisoning Attacks on Pre-trained Models. arxiv: cs.LG\/2004.06660","DOI":"10.18653\/v1\/2020.acl-main.249"},{"key":"e_1_3_2_2_15_1","volume-title":"Seeing Stars: Exploiting Class Relationships For Sentiment Categorization With Respect To Rating Scales. In ACL","author":"Pang Bo","year":"2005","unstructured":"Bo Pang and Lillian Lee . [n.d.]. Seeing Stars: Exploiting Class Relationships For Sentiment Categorization With Respect To Rating Scales. In ACL 2005 . Bo Pang and Lillian Lee. [n.d.]. Seeing Stars: Exploiting Class Relationships For Sentiment Categorization With Respect To Rating Scales. In ACL 2005."},{"key":"e_1_3_2_2_16_1","volume-title":"Proceedings of ACL. 271--278","author":"Pang Bo","year":"2004","unstructured":"Bo Pang and Lillian Lee . 2004 . A Sentimental Education: Sentiment Analysis Using Subjectivity . In Proceedings of ACL. 271--278 . Bo Pang and Lillian Lee. 2004. A Sentimental Education: Sentiment Analysis Using Subjectivity. In Proceedings of ACL. 271--278."},{"key":"e_1_3_2_2_17_1","volume-title":"International Conference on Learning Representations","author":"Szegedy Christian","year":"2014","unstructured":"Christian Szegedy , Wojciech Zaremba , Ilya Sutskever , Joan Bruna , Dumitru Erhan , Ian Goodfellow , and Rob Fergus . 2014 . Intriguing properties of neural networks . In International Conference on Learning Representations 2014. Christian Szegedy, Wojciech Zaremba, Ilya Sutskever, Joan Bruna, Dumitru Erhan, Ian Goodfellow, and Rob Fergus. 2014. Intriguing properties of neural networks. In International Conference on Learning Representations 2014."},{"key":"e_1_3_2_2_18_1","unstructured":"Shuo Wang Surya Nepal Carsten Rudolph Marthie Grobler Shangyu Chen and Tianle Chen. 2020. Backdoor Attacks against Transfer Learning with Pre-trained Deep Learning Models. arxiv: cs.LG\/2001.03274  Shuo Wang Surya Nepal Carsten Rudolph Marthie Grobler Shangyu Chen and Tianle Chen. 2020. Backdoor Attacks against Transfer Learning with Pre-trained Deep Learning Models. arxiv: cs.LG\/2001.03274"},{"key":"e_1_3_2_2_19_1","volume-title":"Annotating Expressions of Opinions and Emotions in Language. Language Resources and Evaluation","author":"Wiebe Janyce","unstructured":"Janyce Wiebe and Theresa Wilson . [n.d.]. Annotating Expressions of Opinions and Emotions in Language. Language Resources and Evaluation , Vol. 39 , 2 ([n.,d.]). Janyce Wiebe and Theresa Wilson. [n.d.]. Annotating Expressions of Opinions and Emotions in Language. Language Resources and Evaluation, Vol. 39, 2 ([n.,d.])."},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11633-019-1211-x"}],"event":{"name":"CIKM '20: The 29th ACM International Conference on Information and Knowledge Management","location":"Virtual Event Ireland","acronym":"CIKM '20","sponsor":["SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web","SIGIR ACM Special Interest Group on Information Retrieval"]},"container-title":["Proceedings of the 29th ACM International Conference on Information & Knowledge Management"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3340531.3412130","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3340531.3412130","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:02:30Z","timestamp":1750197750000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3340531.3412130"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,10,19]]},"references-count":20,"alternative-id":["10.1145\/3340531.3412130","10.1145\/3340531"],"URL":"https:\/\/doi.org\/10.1145\/3340531.3412130","relation":{},"subject":[],"published":{"date-parts":[[2020,10,19]]},"assertion":[{"value":"2020-10-19","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}