{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,14]],"date-time":"2026-04-14T15:51:54Z","timestamp":1776181914005,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":20,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,1,12]],"date-time":"2020-01-12T00:00:00Z","timestamp":1578787200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100003725","name":"National Research Foundation of Korea","doi-asserted-by":"publisher","award":["2017R1C1B2003957"],"award-info":[{"award-number":["2017R1C1B2003957"]}],"id":[{"id":"10.13039\/501100003725","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100010418","name":"Institute for Information and Communications Technology Promotion","doi-asserted-by":"publisher","award":["2018-0-00420"],"award-info":[{"award-number":["2018-0-00420"]}],"id":[{"id":"10.13039\/501100010418","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,1,12]]},"DOI":"10.1145\/3378936.3378938","type":"proceedings-article","created":{"date-parts":[[2020,3,7]],"date-time":"2020-03-07T12:09:51Z","timestamp":1583582991000},"page":"53-57","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":4,"title":["FriendNet Backdoor"],"prefix":"10.1145","author":[{"given":"Hyun","family":"Kwon","sequence":"first","affiliation":[{"name":"Korea Advanced Institute of Science and Technology, School of Computing, Daejeon, South Korea"}]},{"given":"Hyunsoo","family":"Yoon","sequence":"additional","affiliation":[{"name":"Korea Advanced Institute of Science and Technology, School of Computing, Daejeon, South Korea"}]},{"given":"Ki-Woong","family":"Park","sequence":"additional","affiliation":[{"name":"Sejong University, Computer & Information Security, Seoul, South Korea"}]}],"member":"320","published-online":{"date-parts":[[2020,3,7]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2014.09.003"},{"key":"e_1_3_2_1_2_1","volume-title":"Intriguing properties of neural networks,\" in ICLR","author":"Szegedy C.","year":"2014","unstructured":"C. Szegedy , W. Zaremba , I. Sutskever , J. Bruna , D. Erhan , I. Goodfellow , and R. Fergus , \" Intriguing properties of neural networks,\" in ICLR , 2014 . C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, and R. Fergus, \"Intriguing properties of neural networks,\" in ICLR, 2014."},{"key":"e_1_3_2_1_3_1","first-page":"1467","volume-title":"Poisoning attacks against support vector machines,\" in Proceedings of the 29th International Coference on International Conference on Machine Learning","author":"Biggio B.","year":"2012","unstructured":"B. Biggio , B. Nelson , and P. Laskov , \" Poisoning attacks against support vector machines,\" in Proceedings of the 29th International Coference on International Conference on Machine Learning , pp. 1467 -- 1474 , Omnipress , 2012 . B. Biggio, B. Nelson, and P. Laskov, \"Poisoning attacks against support vector machines,\" in Proceedings of the 29th International Coference on International Conference on Machine Learning, pp. 1467--1474, Omnipress, 2012."},{"key":"e_1_3_2_1_4_1","volume-title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain,\" arXiv preprint arXiv:1708.06733","author":"Gu T.","year":"2017","unstructured":"T. Gu , B. Dolan-Gavitt , and S. Garg , \" Badnets: Identifying vulnerabilities in the machine learning model supply chain,\" arXiv preprint arXiv:1708.06733 , 2017 . T. Gu, B. Dolan-Gavitt, and S. Garg, \"Badnets: Identifying vulnerabilities in the machine learning model supply chain,\" arXiv preprint arXiv:1708.06733, 2017."},{"key":"e_1_3_2_1_5_1","volume-title":"Mnist handwritten digit database,\" AT&T Labs [Online]. Available: http:\/\/yann. lecun. com\/exdb\/mnist","author":"LeCun Y.","year":"2010","unstructured":"Y. LeCun , C. Cortes , and C. J. Burges , \" Mnist handwritten digit database,\" AT&T Labs [Online]. Available: http:\/\/yann. lecun. com\/exdb\/mnist , vol. 2 , 2010 . Y. LeCun, C. Cortes, and C. J. Burges, \"Mnist handwritten digit database,\" AT&T Labs [Online]. Available: http:\/\/yann. lecun. com\/exdb\/mnist, vol. 2, 2010."},{"key":"e_1_3_2_1_6_1","volume-title":"Fashion-mnist: a novel image dataset for benchmarking machine learning algorithms,\" arXiv preprint arXiv:1708.07747","author":"Xiao H.","year":"2017","unstructured":"H. Xiao , K. Rasul , and R. Vollgraf , \" Fashion-mnist: a novel image dataset for benchmarking machine learning algorithms,\" arXiv preprint arXiv:1708.07747 , 2017 . H. Xiao, K. Rasul, and R. Vollgraf, \"Fashion-mnist: a novel image dataset for benchmarking machine learning algorithms,\" arXiv preprint arXiv:1708.07747, 2017."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-010-5188-5"},{"key":"e_1_3_2_1_8_1","volume-title":"Explaining and harnessing adversarial examples,\" in International Conference on Learning Representations","author":"Goodfellow I.","year":"2015","unstructured":"I. Goodfellow , J. Shlens , and C. Szegedy , \" Explaining and harnessing adversarial examples,\" in International Conference on Learning Representations , 2015 . I. Goodfellow, J. Shlens, and C. Szegedy, \"Explaining and harnessing adversarial examples,\" in International Conference on Learning Representations, 2015."},{"key":"e_1_3_2_1_9_1","volume-title":"Adversarial examples in the physical world,\" ICLR Workshop","author":"Kurakin A.","year":"2017","unstructured":"A. Kurakin , I. Goodfellow , and S. Bengio , \" Adversarial examples in the physical world,\" ICLR Workshop , 2017 . A. Kurakin, I. Goodfellow, and S. Bengio, \"Adversarial examples in the physical world,\" ICLR Workshop, 2017."},{"key":"e_1_3_2_1_10_1","volume-title":"Deepfool: a simple and accurate method to fool deep neural networks,\" in Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition","author":"Moosavi-Dezfooli S.-M.","year":"2016","unstructured":"S.-M. Moosavi-Dezfooli , A. Fawzi , and P. Frossard , \" Deepfool: a simple and accurate method to fool deep neural networks,\" in Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition , 2016 . S.-M. Moosavi-Dezfooli, A. Fawzi, and P. Frossard, \"Deepfool: a simple and accurate method to fool deep neural networks,\" in Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, 2016."},{"key":"e_1_3_2_1_11_1","first-page":"372","volume-title":"2016 IEEE European Symposium on","author":"Papernot N.","year":"2016","unstructured":"N. Papernot , P. McDaniel , S. Jha , M. Fredrikson , Z. B. Celik , and A. Swami , \" The limitations of deep learning in adversarial settings,\" in Security and Privacy (Euro S&P) , 2016 IEEE European Symposium on , pp. 372 -- 387 , 2016 . N. Papernot, P. McDaniel, S. Jha, M. Fredrikson, Z. B. Celik, and A. Swami, \"The limitations of deep learning in adversarial settings,\" in Security and Privacy (Euro S&P), 2016 IEEE European Symposium on, pp. 372--387, 2016."},{"key":"e_1_3_2_1_12_1","first-page":"39","volume-title":"2017 IEEE Symposium on","author":"Carlini N.","year":"2017","unstructured":"N. Carlini and D. Wagner , \"Towards evaluating the robustness of neural networks,\" in Security and Privacy (SP) , 2017 IEEE Symposium on , pp. 39 -- 57 , IEEE, 2017 . N. Carlini and D.Wagner, \"Towards evaluating the robustness of neural networks,\" in Security and Privacy (SP), 2017 IEEE Symposium on, pp. 39--57, IEEE, 2017."},{"key":"e_1_3_2_1_13_1","volume-title":"Generative poisoning attack method against neural networks,\" arXiv preprint arXiv:1703.01340","author":"Yang C.","year":"2017","unstructured":"C. Yang , Q. Wu , H. Li , and Y. Chen , \" Generative poisoning attack method against neural networks,\" arXiv preprint arXiv:1703.01340 , 2017 .M. Mozaffari-Kermani, S. Sur-Kolay, A. Raghunathan, and N. K. Jha, \"Systematic poisoning attacks on and defenses for machine learning in healthcare,\" IEEE journal of biomedical and health informatics, vol. 19 , no. 6, pp. 1893--1905, 2015. C. Yang, Q. Wu, H. Li, and Y. Chen, \"Generative poisoning attack method against neural networks,\" arXiv preprint arXiv:1703.01340, 2017.M. Mozaffari-Kermani, S. Sur-Kolay, A. Raghunathan, and N. K. Jha, \"Systematic poisoning attacks on and defenses for machine learning in healthcare,\" IEEE journal of biomedical and health informatics, vol. 19, no. 6, pp. 1893--1905, 2015."},{"key":"e_1_3_2_1_14_1","volume-title":"Trojaning attack on neural networks,\" NDSS","author":"Liu Y.","year":"2018","unstructured":"Y. Liu , S. Ma , Y. Aafer , W.-C. Lee , J. Zhai , W. Wang , and X. Zhang , \" Trojaning attack on neural networks,\" NDSS , 2018 . Y. Liu, S. Ma, Y. Aafer, W.-C. Lee, J. Zhai, W. Wang, and X. Zhang, \"Trojaning attack on neural networks,\" NDSS, 2018."},{"key":"e_1_3_2_1_15_1","volume-title":"Neural cleanse: Identifying and mitigating backdoor attacks in neural networks,\" 2019 IEEE Symposium on Security and Privacy (SP)","author":"Wang B.","year":"2019","unstructured":"B. Wang , Y. Yao , S. Shan , H. Li , B. Viswanath , H. Zheng , and B. Y. Zhao , \" Neural cleanse: Identifying and mitigating backdoor attacks in neural networks,\" 2019 IEEE Symposium on Security and Privacy (SP) 2019 . B. Wang, Y. Yao, S. Shan, H. Li, B. Viswanath, H. Zheng, and B. Y. Zhao, \"Neural cleanse: Identifying and mitigating backdoor attacks in neural networks,\" 2019 IEEE Symposium on Security and Privacy (SP) 2019."},{"key":"e_1_3_2_1_16_1","volume-title":"Hardware trojan attacks on neural networks,\" arXiv preprint arXiv:1806.05768","author":"Clements J.","year":"2018","unstructured":"J. Clements and Y. Lao , \" Hardware trojan attacks on neural networks,\" arXiv preprint arXiv:1806.05768 , 2018 . J. Clements and Y. Lao, \"Hardware trojan attacks on neural networks,\" arXiv preprint arXiv:1806.05768, 2018."},{"key":"e_1_3_2_1_17_1","volume-title":"Gradient-based learning applied to document recognition,\" Proceedings of the IEEE","author":"LeCun Y.","unstructured":"Y. LeCun , L. Bottou , Y. Bengio , and P. Haffner , \" Gradient-based learning applied to document recognition,\" Proceedings of the IEEE , vol. 86 , no. 11, 1998. Y. LeCun, L. Bottou, Y. Bengio, and P. Haffner, \"Gradient-based learning applied to document recognition,\" Proceedings of the IEEE, vol. 86, no. 11, 1998."},{"key":"e_1_3_2_1_18_1","volume-title":"Adam: A method for stochastic optimization,\" The International Conference on Learning Representations (ICLR)","author":"Kingma D.","year":"2015","unstructured":"D. Kingma and J. Ba , \" Adam: A method for stochastic optimization,\" The International Conference on Learning Representations (ICLR) , 2015 . D. Kingma and J. Ba, \"Adam: A method for stochastic optimization,\" The International Conference on Learning Representations (ICLR), 2015."},{"key":"e_1_3_2_1_19_1","first-page":"265","article-title":"Tensorflow: A system for large-scale machine learning","volume":"16","author":"Abadi M.","year":"2016","unstructured":"M. Abadi , P. Barham , J. Chen , Z. Chen , A. Davis , J. Dean , M. Devin , S. Ghemawat , G. Irving , M. Isard , , \" Tensorflow: A system for large-scale machine learning .,\" in OSDI , vol. 16 , pp. 265 -- 283 , 2016 . M. Abadi, P. Barham, J. Chen, Z. Chen, A. Davis, J. Dean, M. Devin, S. Ghemawat, G. Irving, M. Isard, et al., \"Tensorflow: A system for large-scale machine learning.,\" in OSDI, vol. 16, pp. 265--283, 2016.","journal-title":"OSDI"},{"issue":"04","key":"e_1_3_2_1_20_1","article-title":"Multi-targeted Backdoor: Indentifying Backdoor Attack for Multiple Deep Neural Networks","volume":"103","author":"Yoon Hyunsoo","year":"2020","unstructured":"Kwon, Hyun, Hyunsoo Yoon , and Ki-Woong Park . \" Multi-targeted Backdoor: Indentifying Backdoor Attack for Multiple Deep Neural Networks .\", IEICE Transactions on Information and Systems 103 ( 04 ), 2020 . DOI:10.1587\/transinf.2019EDL8170 10.1587\/transinf.2019EDL8170 Kwon, Hyun, Hyunsoo Yoon, and Ki-Woong Park. \" Multi-targeted Backdoor: Indentifying Backdoor Attack for Multiple Deep Neural Networks.\", IEICE Transactions on Information and Systems 103(04), 2020. DOI:10.1587\/transinf.2019EDL8170","journal-title":"IEICE Transactions on Information and Systems"}],"event":{"name":"ICSIM '20: The 3rd International Conference on Software Engineering and Information Management","location":"Sydney NSW Australia","acronym":"ICSIM '20","sponsor":["University of Science and Technology of China University of Science and Technology of China"]},"container-title":["Proceedings of the 3rd International Conference on Software Engineering and Information Management"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3378936.3378938","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3378936.3378938","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T23:44:47Z","timestamp":1750203887000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3378936.3378938"}},"subtitle":["Indentifying Backdoor Attack that is safe for Friendly Deep Neural Network"],"short-title":[],"issued":{"date-parts":[[2020,1,12]]},"references-count":20,"alternative-id":["10.1145\/3378936.3378938","10.1145\/3378936"],"URL":"https:\/\/doi.org\/10.1145\/3378936.3378938","relation":{},"subject":[],"published":{"date-parts":[[2020,1,12]]},"assertion":[{"value":"2020-03-07","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}