{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,14]],"date-time":"2026-03-14T17:58:02Z","timestamp":1773511082705,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":53,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,5,30]],"date-time":"2022-05-30T00:00:00Z","timestamp":1653868800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,5,30]]},"DOI":"10.1145\/3488932.3497752","type":"proceedings-article","created":{"date-parts":[[2022,5,24]],"date-time":"2022-05-24T04:23:26Z","timestamp":1653366206000},"page":"322-336","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["Confusing and Detecting ML Adversarial Attacks with Injected Attractors"],"prefix":"10.1145","author":[{"given":"Jiyi","family":"Zhang","sequence":"first","affiliation":[{"name":"National University of Singapore, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ee-Chien","family":"Chang","sequence":"additional","affiliation":[{"name":"National University of Singapore, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hwee Kuan","family":"Lee","sequence":"additional","affiliation":[{"name":"Bioinformatics Institute, A*STAR, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2022,5,30]]},"reference":[{"key":"e_1_3_2_2_1_1","volume-title":"Wagner","author":"Athalye Anish","year":"2018","unstructured":"Anish Athalye , Nicholas Carlini , and David A . Wagner . 2018 . Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples. In ICML. 274--283. Anish Athalye, Nicholas Carlini, and David A. Wagner. 2018. Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples. In ICML. 274--283."},{"key":"e_1_3_2_2_2_1","volume-title":"Dimensionality Reduction as a Defense against Evasion Attacks on Machine Learning Classifiers. arXiv preprint","author":"Bhagoji Arjun Nitin","year":"2017","unstructured":"Arjun Nitin Bhagoji , Daniel Cullina , and Prateek Mittal . 2017. Dimensionality Reduction as a Defense against Evasion Attacks on Machine Learning Classifiers. arXiv preprint , Vol. 1704 .02654 ( 2017 ). arxiv: 1704.02654 Arjun Nitin Bhagoji, Daniel Cullina, and Prateek Mittal. 2017. Dimensionality Reduction as a Defense against Evasion Attacks on Machine Learning Classifiers. arXiv preprint, Vol. 1704.02654 (2017). arxiv: 1704.02654"},{"key":"e_1_3_2_2_3_1","unstructured":"Wieland Brendel Jonas Rauber and Matthias Bethge. 2018. Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models. In ICLR.  Wieland Brendel Jonas Rauber and Matthias Bethge. 2018. Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models. In ICLR."},{"key":"e_1_3_2_2_4_1","volume-title":"A critique of the DeepSec Platform for Security Analysis of Deep Learning Models. arXiv preprint","author":"Carlini Nicholas","year":"2019","unstructured":"Nicholas Carlini . 2019. A critique of the DeepSec Platform for Security Analysis of Deep Learning Models. arXiv preprint , Vol. 1905 .07112 ( 2019 ). arxiv: 1905.07112 Nicholas Carlini. 2019. A critique of the DeepSec Platform for Security Analysis of Deep Learning Models. arXiv preprint, Vol. 1905.07112 (2019). arxiv: 1905.07112"},{"key":"e_1_3_2_2_5_1","volume-title":"On Evaluating Adversarial Robustness. arXiv preprint","author":"Carlini Nicholas","year":"2019","unstructured":"Nicholas Carlini , Anish Athalye , Nicolas Papernot , Wieland Brendel , Jonas Rauber , Dimitris Tsipras , Ian J. Goodfellow , Aleksander Madry , and Alexey Kurakin . 2019. On Evaluating Adversarial Robustness. arXiv preprint , Vol. 1902 .06705 ( 2019 ). arxiv: 1902.06705 Nicholas Carlini, Anish Athalye, Nicolas Papernot, Wieland Brendel, Jonas Rauber, Dimitris Tsipras, Ian J. Goodfellow, Aleksander Madry, and Alexey Kurakin. 2019. On Evaluating Adversarial Robustness. arXiv preprint, Vol. 1902.06705 (2019). arxiv: 1902.06705"},{"key":"e_1_3_2_2_6_1","volume-title":"Wagner","author":"Carlini Nicholas","year":"2017","unstructured":"Nicholas Carlini and David A . Wagner . 2017 . Towards Evaluating the Robustness of Neural Networks. In IEEE S &P. 39--57. Nicholas Carlini and David A. Wagner. 2017. Towards Evaluating the Robustness of Neural Networks. In IEEE S&P. 39--57."},{"key":"e_1_3_2_2_7_1","first-page":"1","article-title":"Quantization Index Modulation Methods for Digital Watermarking and Information Embedding of Multimedia","volume":"27","author":"Chen Brian","year":"2001","unstructured":"Brian Chen and Gregory W. Wornell . 2001 . Quantization Index Modulation Methods for Digital Watermarking and Information Embedding of Multimedia . VLSI Signal Processing , Vol. 27 , 1 -- 2 (2001), 7--33. Brian Chen and Gregory W. Wornell. 2001. Quantization Index Modulation Methods for Digital Watermarking and Information Embedding of Multimedia. VLSI Signal Processing, Vol. 27, 1--2 (2001), 7--33.","journal-title":"VLSI Signal Processing"},{"key":"e_1_3_2_2_8_1","volume-title":"EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples. In AAAI. 10--17.","author":"Chen Pin-Yu","year":"2018","unstructured":"Pin-Yu Chen , Yash Sharma , Huan Zhang , Jinfeng Yi , and Cho-Jui Hsieh . 2018 . EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples. In AAAI. 10--17. Pin-Yu Chen, Yash Sharma, Huan Zhang, Jinfeng Yi, and Cho-Jui Hsieh. 2018. EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples. In AAAI. 10--17."},{"key":"e_1_3_2_2_9_1","volume-title":"ZOO: Zeroth Order Optimization Based Black-box Attacks to Deep Neural Networks without Training Substitute Models. In AISec@CCS. 15--26.","author":"Chen Pin-Yu","year":"2017","unstructured":"Pin-Yu Chen , Huan Zhang , Yash Sharma , Jinfeng Yi , and Cho-Jui Hsieh . 2017 . ZOO: Zeroth Order Optimization Based Black-box Attacks to Deep Neural Networks without Training Substitute Models. In AISec@CCS. 15--26. Pin-Yu Chen, Huan Zhang, Yash Sharma, Jinfeng Yi, and Cho-Jui Hsieh. 2017. ZOO: Zeroth Order Optimization Based Black-box Attacks to Deep Neural Networks without Training Substitute Models. In AISec@CCS. 15--26."},{"key":"e_1_3_2_2_10_1","unstructured":"Minhao Cheng Thong Le Pin-Yu Chen Huan Zhang Jinfeng Yi and Cho-Jui Hsieh. 2019. Query-Efficient Hard-label Black-box Attack: An Optimization-based Approach. In ICLR.  Minhao Cheng Thong Le Pin-Yu Chen Huan Zhang Jinfeng Yi and Cho-Jui Hsieh. 2019. Query-Efficient Hard-label Black-box Attack: An Optimization-based Approach. In ICLR."},{"key":"e_1_3_2_2_11_1","unstructured":"Minhao Cheng Simranjit Singh Patrick H. Chen Pin-Yu Chen Sijia Liu and Cho-Jui Hsieh. 2020. Sign-OPT: A Query-Efficient Hard-label Adversarial Attack. In ICLR.  Minhao Cheng Simranjit Singh Patrick H. Chen Pin-Yu Chen Sijia Liu and Cho-Jui Hsieh. 2020. Sign-OPT: A Query-Efficient Hard-label Adversarial Attack. In ICLR."},{"key":"e_1_3_2_2_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/83.650120"},{"key":"e_1_3_2_2_13_1","volume-title":"Storkey","author":"Darlow Luke Nicholas","year":"2018","unstructured":"Luke Nicholas Darlow , Elliot J. Crowley , Antreas Antoniou , and Amos J . Storkey . 2018 . CINIC-10 is not ImageNet or CIFAR- 10. arXiv preprint, Vol. 1810 .03505 (2018). arxiv: 1810.03505 Luke Nicholas Darlow, Elliot J. Crowley, Antreas Antoniou, and Amos J. Storkey. 2018. CINIC-10 is not ImageNet or CIFAR-10. arXiv preprint, Vol. 1810.03505 (2018). arxiv: 1810.03505"},{"key":"e_1_3_2_2_14_1","volume-title":"Discovering Adversarial Examples with Momentum. arXiv preprint","author":"Dong Yinpeng","year":"2017","unstructured":"Yinpeng Dong , Fangzhou Liao , Tianyu Pang , Xiaolin Hu , and Jun Zhu . 2017. Discovering Adversarial Examples with Momentum. arXiv preprint , Vol. 1710 .06081 ( 2017 ). arxiv: 1710.06081 Yinpeng Dong, Fangzhou Liao, Tianyu Pang, Xiaolin Hu, and Jun Zhu. 2017. Discovering Adversarial Examples with Momentum. arXiv preprint, Vol. 1710.06081 (2017). arxiv: 1710.06081"},{"key":"e_1_3_2_2_15_1","volume-title":"Black","author":"Ghosh Partha","year":"2019","unstructured":"Partha Ghosh , Arpan Losalka , and Michael J . Black . 2019 . Resisting Adversarial Attacks Using Gaussian Mixture Variational Autoencoders. In AAAI. 541--548. Partha Ghosh, Arpan Losalka, and Michael J. Black. 2019. Resisting Adversarial Attacks Using Gaussian Mixture Variational Autoencoders. In AAAI. 541--548."},{"key":"e_1_3_2_2_16_1","volume-title":"Adversarial and Clean Data Are Not Twins. arXiv preprint","author":"Gong Zhitao","year":"2017","unstructured":"Zhitao Gong , Wenlu Wang , and Wei-Shinn Ku. 2017. Adversarial and Clean Data Are Not Twins. arXiv preprint , Vol. 1704 .04960 ( 2017 ). arxiv: 1704.04960 Zhitao Gong, Wenlu Wang, and Wei-Shinn Ku. 2017. Adversarial and Clean Data Are Not Twins. arXiv preprint, Vol. 1704.04960 (2017). arxiv: 1704.04960"},{"key":"e_1_3_2_2_17_1","unstructured":"Ian J. Goodfellow Jonathon Shlens and Christian Szegedy. 2015. Explaining and Harnessing Adversarial Examples. In ICLR.  Ian J. Goodfellow Jonathon Shlens and Christian Szegedy. 2015. Explaining and Harnessing Adversarial Examples. In ICLR."},{"key":"e_1_3_2_2_18_1","volume-title":"McDaniel","author":"Grosse Kathrin","year":"2017","unstructured":"Kathrin Grosse , Praveen Manoharan , Nicolas Papernot , Michael Backes , and Patrick D . McDaniel . 2017 . On the (Statistical) Detection of Adversarial Examples . arXiv preprint, Vol. 1702 .06280 (2017). arxiv: 1702.06280 Kathrin Grosse, Praveen Manoharan, Nicolas Papernot, Michael Backes, and Patrick D. McDaniel. 2017. On the (Statistical) Detection of Adversarial Examples. arXiv preprint, Vol. 1702.06280 (2017). arxiv: 1702.06280"},{"key":"e_1_3_2_2_19_1","unstructured":"Chuan Guo Mayank Rana Moustapha Ciss\u00e9 and Laurens van der Maaten. 2018. Countering Adversarial Images using Input Transformations. In ICLR.  Chuan Guo Mayank Rana Moustapha Ciss\u00e9 and Laurens van der Maaten. 2018. Countering Adversarial Images using Input Transformations. In ICLR."},{"key":"e_1_3_2_2_20_1","volume-title":"Dally","author":"Han Song","year":"2016","unstructured":"Song Han , Huizi Mao , and William J . Dally . 2016 . Deep Compression : Compressing Deep Neural Network with Pruning, Trained Quantization and Huffman Coding. In ICLR. Song Han, Huizi Mao, and William J. Dally. 2016. Deep Compression: Compressing Deep Neural Network with Pruning, Trained Quantization and Huffman Coding. In ICLR."},{"key":"e_1_3_2_2_21_1","volume-title":"Dally","author":"Han Song","year":"2015","unstructured":"Song Han , Jeff Pool , John Tran , and William J . Dally . 2015 . Learning both Weights and Connections for Efficient Neural Network. In NIPS. 1135--1143. Song Han, Jeff Pool, John Tran, and William J. Dally. 2015. Learning both Weights and Connections for Efficient Neural Network. In NIPS. 1135--1143."},{"key":"e_1_3_2_2_22_1","unstructured":"Warren He Bo Li and Dawn Song. 2018. Decision Boundary Analysis of Adversarial Examples. In ICLR.  Warren He Bo Li and Dawn Song. 2018. Decision Boundary Analysis of Adversarial Examples. In ICLR."},{"key":"e_1_3_2_2_23_1","volume-title":"Visible Progress on Adversarial Images and a New Saliency Map. arXiv preprint","author":"Hendrycks Dan","year":"2016","unstructured":"Dan Hendrycks and Kevin Gimpel . 2016. Visible Progress on Adversarial Images and a New Saliency Map. arXiv preprint , Vol. 1608 .00530 ( 2016 ). arxiv: 1608.00530 Dan Hendrycks and Kevin Gimpel. 2016. Visible Progress on Adversarial Images and a New Saliency Map. arXiv preprint, Vol. 1608.00530 (2016). arxiv: 1608.00530"},{"key":"e_1_3_2_2_24_1","volume-title":"Distilling the Knowledge in a Neural Network. arXiv preprint","author":"Hinton Geoffrey E.","year":"2015","unstructured":"Geoffrey E. Hinton , Oriol Vinyals , and Jeffrey Dean . 2015. Distilling the Knowledge in a Neural Network. arXiv preprint , Vol. 1503 .02531 ( 2015 ). arxiv: 1503.02531 Geoffrey E. Hinton, Oriol Vinyals, and Jeffrey Dean. 2015. Distilling the Knowledge in a Neural Network. arXiv preprint, Vol. 1503.02531 (2015). arxiv: 1503.02531"},{"key":"e_1_3_2_2_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/34.291440"},{"key":"e_1_3_2_2_26_1","volume-title":"Teck Khim Ng, and Ee-Chien Chang.","author":"Kou Connie","year":"2020","unstructured":"Connie Kou , Hwee Kuan Lee , Teck Khim Ng, and Ee-Chien Chang. 2020 . Enhancing Transformation-Based Defenses Against Adversarial Attacks with a Distribution Classifier. In ICLR. Connie Kou, Hwee Kuan Lee, Teck Khim Ng, and Ee-Chien Chang. 2020. Enhancing Transformation-Based Defenses Against Adversarial Attacks with a Distribution Classifier. In ICLR."},{"key":"e_1_3_2_2_27_1","doi-asserted-by":"crossref","unstructured":"Alexey Kurakin Ian J. Goodfellow and Samy Bengio. 2017. Adversarial examples in the physical world. In ICLR.  Alexey Kurakin Ian J. Goodfellow and Samy Bengio. 2017. Adversarial examples in the physical world. In ICLR.","DOI":"10.1201\/9781351251389-8"},{"key":"e_1_3_2_2_28_1","volume-title":"Jiahao Yu, Minhui Xue, Dali Kaafar, and Haojin Zhu.","author":"Li Shaofeng","year":"2019","unstructured":"Shaofeng Li , Benjamin Zi Hao Zhao , Jiahao Yu, Minhui Xue, Dali Kaafar, and Haojin Zhu. 2019 . Invisible Backdoor Attacks Against Deep Neural Networks . arXiv preprint, Vol. 1909 .02742 (2019). arxiv: 1909.02742 Shaofeng Li, Benjamin Zi Hao Zhao, Jiahao Yu, Minhui Xue, Dali Kaafar, and Haojin Zhu. 2019. Invisible Backdoor Attacks Against Deep Neural Networks. arXiv preprint, Vol. 1909.02742 (2019). arxiv: 1909.02742"},{"key":"e_1_3_2_2_29_1","doi-asserted-by":"crossref","unstructured":"Xin Li and Fuxin Li. 2017. Adversarial Examples Detection in Deep Networks with Convolutional Filter Statistics. In ICCV. 5775--5783.  Xin Li and Fuxin Li. 2017. Adversarial Examples Detection in Deep Networks with Convolutional Filter Statistics. In ICCV. 5775--5783.","DOI":"10.1109\/ICCV.2017.615"},{"key":"e_1_3_2_2_30_1","volume-title":"DEEPSEC: A Uniform Platform for Security Analysis of Deep Learning Model","author":"Ling Xiang","year":"2019","unstructured":"Xiang Ling , Shouling Ji , Jiaxu Zou , Jiannan Wang , Chunming Wu , Bo Li , and Ting Wang . 2019 . DEEPSEC: A Uniform Platform for Security Analysis of Deep Learning Model . In IEEE S &P. 673--690. Xiang Ling, Shouling Ji, Jiaxu Zou, Jiannan Wang, Chunming Wu, Bo Li, and Ting Wang. 2019. DEEPSEC: A Uniform Platform for Security Analysis of Deep Learning Model. In IEEE S&P. 673--690."},{"key":"e_1_3_2_2_31_1","unstructured":"Xingjun Ma Bo Li Yisen Wang Sarah M. Erfani Sudanthi N. R. Wijewickrema Grant Schoenebeck Dawn Song Michael E. Houle and James Bailey. 2018. Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality. In ICLR.  Xingjun Ma Bo Li Yisen Wang Sarah M. Erfani Sudanthi N. R. Wijewickrema Grant Schoenebeck Dawn Song Michael E. Houle and James Bailey. 2018. Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality. In ICLR."},{"key":"e_1_3_2_2_32_1","unstructured":"Aleksander Madry Aleksandar Makelov Ludwig Schmidt Dimitris Tsipras and Adrian Vladu. 2018. Towards Deep Learning Models Resistant to Adversarial Attacks. In ICLR.  Aleksander Madry Aleksandar Makelov Ludwig Schmidt Dimitris Tsipras and Adrian Vladu. 2018. Towards Deep Learning Models Resistant to Adversarial Attacks. In ICLR."},{"key":"e_1_3_2_2_33_1","doi-asserted-by":"crossref","unstructured":"Dongyu Meng and Hao Chen. 2017. MagNet: A Two-Pronged Defense against Adversarial Examples. In ACM CCS. 135--147.  Dongyu Meng and Hao Chen. 2017. MagNet: A Two-Pronged Defense against Adversarial Examples. In ACM CCS. 135--147.","DOI":"10.1145\/3133956.3134057"},{"key":"e_1_3_2_2_34_1","volume-title":"Yet another but more efficient black-box adversarial attack: tiling and evolution strategies. arXiv preprint","author":"Meunier Laurent","year":"2019","unstructured":"Laurent Meunier , Jamal Atif , and Olivier Teytaud . 2019. Yet another but more efficient black-box adversarial attack: tiling and evolution strategies. arXiv preprint , Vol. 1910 .02244 ( 2019 ). arxiv: 1910.02244 Laurent Meunier, Jamal Atif, and Olivier Teytaud. 2019. Yet another but more efficient black-box adversarial attack: tiling and evolution strategies. arXiv preprint, Vol. 1910.02244 (2019). arxiv: 1910.02244"},{"key":"e_1_3_2_2_35_1","volume-title":"Bloom","author":"Miller Matthew L.","year":"2000","unstructured":"Matthew L. Miller , Ingemar J. Cox , and Jeffrey A . Bloom . 2000 . Informed Embedding : Exploiting Image and Detector Information During Watermark Insertion. In ICIP. 1--4. Matthew L. Miller, Ingemar J. Cox, and Jeffrey A. Bloom. 2000. Informed Embedding: Exploiting Image and Detector Information During Watermark Insertion. In ICIP. 1--4."},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"crossref","unstructured":"Seyed-Mohsen Moosavi-Dezfooli Alhussein Fawzi Omar Fawzi and Pascal Frossard. 2017. Universal Adversarial Perturbations. In CVPR. 86--94.  Seyed-Mohsen Moosavi-Dezfooli Alhussein Fawzi Omar Fawzi and Pascal Frossard. 2017. Universal Adversarial Perturbations. In CVPR. 86--94.","DOI":"10.1109\/CVPR.2017.17"},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"crossref","unstructured":"Seyed-Mohsen Moosavi-Dezfooli Alhussein Fawzi and Pascal Frossard. 2016. DeepFool: A Simple and Accurate Method to Fool Deep Neural Networks. In CVPR. 2574--2582.  Seyed-Mohsen Moosavi-Dezfooli Alhussein Fawzi and Pascal Frossard. 2016. DeepFool: A Simple and Accurate Method to Fool Deep Neural Networks. In CVPR. 2574--2582.","DOI":"10.1109\/CVPR.2016.282"},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"crossref","unstructured":"Nicolas Papernot Patrick D. McDaniel Ian J. Goodfellow Somesh Jha Z. Berkay Celik and Ananthram Swami. 2017. Practical Black-Box Attacks against Machine Learning. In ACM AsiaCCS. 506--519.  Nicolas Papernot Patrick D. McDaniel Ian J. Goodfellow Somesh Jha Z. Berkay Celik and Ananthram Swami. 2017. Practical Black-Box Attacks against Machine Learning. In ACM AsiaCCS. 506--519.","DOI":"10.1145\/3052973.3053009"},{"key":"e_1_3_2_2_39_1","volume-title":"The Limitations of Deep Learning in Adversarial Settings","author":"Papernot Nicolas","unstructured":"Nicolas Papernot , Patrick D. McDaniel , Somesh Jha , Matt Fredrikson , Z. Berkay Celik , and Ananthram Swami . 2016. The Limitations of Deep Learning in Adversarial Settings . In IEEE Euro S &P. 372--387. Nicolas Papernot, Patrick D. McDaniel, Somesh Jha, Matt Fredrikson, Z. Berkay Celik, and Ananthram Swami. 2016. The Limitations of Deep Learning in Adversarial Settings. In IEEE Euro S&P. 372--387."},{"key":"e_1_3_2_2_40_1","unstructured":"Binxin Ru Adam D. Cobb Arno Blaas and Yarin Gal. 2020. BayesOpt Adversarial Attack. In ICLR.  Binxin Ru Adam D. Cobb Arno Blaas and Yarin Gal. 2020. BayesOpt Adversarial Attack. In ICLR."},{"key":"e_1_3_2_2_41_1","doi-asserted-by":"publisher","DOI":"10.1007\/BF01206949"},{"key":"e_1_3_2_2_42_1","doi-asserted-by":"crossref","unstructured":"Aniruddha Saha Akshayvarun Subramanya and Hamed Pirsiavash. 2020. Hidden Trigger Backdoor Attacks. In AAAI. 11957--11965.  Aniruddha Saha Akshayvarun Subramanya and Hamed Pirsiavash. 2020. Hidden Trigger Backdoor Attacks. In AAAI. 11957--11965.","DOI":"10.1609\/aaai.v34i07.6871"},{"key":"e_1_3_2_2_43_1","doi-asserted-by":"crossref","unstructured":"Matthias Schunter. 2016. Intel Software Guard Extensions: Introduction and Open Research Challenges. In SPRO.  Matthias Schunter. 2016. Intel Software Guard Extensions: Introduction and Open Research Challenges. In SPRO.","DOI":"10.1145\/2995306.2995307"},{"key":"e_1_3_2_2_44_1","volume-title":"Zhao","author":"Shan Shawn","year":"2020","unstructured":"Shawn Shan , Emily Wenger , Bolun Wang , Bo Li , Haitao Zheng , and Ben Y . Zhao . 2020 . Gotta Catch'Em All : Using Honeypots to Catch Adversarial Attacks on Neural Networks. In ACM CCS. 67--83. Shawn Shan, Emily Wenger, Bolun Wang, Bo Li, Haitao Zheng, and Ben Y. Zhao. 2020. Gotta Catch'Em All: Using Honeypots to Catch Adversarial Attacks on Neural Networks. In ACM CCS. 67--83."},{"key":"e_1_3_2_2_45_1","volume-title":"Sitatapatra: Blocking the Transfer of Adversarial Samples. arXiv preprint","author":"Shumailov Ilia","year":"2019","unstructured":"Ilia Shumailov , Xitong Gao , Yiren Zhao , Robert Mullins , Ross Anderson , and Cheng-Zhong Xu . 2019 . Sitatapatra: Blocking the Transfer of Adversarial Samples. arXiv preprint , Vol. 1901 .08121 (2019). arxiv: 1901.08121 Ilia Shumailov, Xitong Gao, Yiren Zhao, Robert Mullins, Ross Anderson, and Cheng-Zhong Xu. 2019. Sitatapatra: Blocking the Transfer of Adversarial Samples. arXiv preprint, Vol. 1901.08121 (2019). arxiv: 1901.08121"},{"key":"e_1_3_2_2_46_1","volume-title":"The Taboo Trap: Behavioural Detection of Adversarial Samples. arXiv preprint","author":"Shumailov Ilia","year":"2018","unstructured":"Ilia Shumailov , Yiren Zhao , Robert Mullins , and Ross Anderson . 2018. The Taboo Trap: Behavioural Detection of Adversarial Samples. arXiv preprint , Vol. 1811 .07375 ( 2018 ). arxiv: 1811.07375 Ilia Shumailov, Yiren Zhao, Robert Mullins, and Ross Anderson. 2018. The Taboo Trap: Behavioural Detection of Adversarial Samples. arXiv preprint, Vol. 1811.07375 (2018). arxiv: 1811.07375"},{"key":"e_1_3_2_2_47_1","unstructured":"Christian Szegedy Wojciech Zaremba Ilya Sutskever Joan Bruna Dumitru Erhan Ian J. Goodfellow and Rob Fergus. 2014. Intriguing properties of neural networks. In ICLR.  Christian Szegedy Wojciech Zaremba Ilya Sutskever Joan Bruna Dumitru Erhan Ian J. Goodfellow and Rob Fergus. 2014. Intriguing properties of neural networks. In ICLR."},{"key":"e_1_3_2_2_48_1","volume-title":"McDaniel","author":"Tram\u00e8r Florian","year":"2018","unstructured":"Florian Tram\u00e8r , Alexey Kurakin , Nicolas Papernot , Ian J. Goodfellow , Dan Boneh , and Patrick D . McDaniel . 2018 . Ensemble Adversarial Training: Attacks and Defenses. In ICLR. Florian Tram\u00e8r, Alexey Kurakin, Nicolas Papernot, Ian J. Goodfellow, Dan Boneh, and Patrick D. McDaniel. 2018. Ensemble Adversarial Training: Attacks and Defenses. In ICLR."},{"key":"e_1_3_2_2_49_1","unstructured":"Florian Tram\u00e8r Fan Zhang Ari Juels Michael K. Reiter and Thomas Ristenpart. 2016. Stealing Machine Learning Models via Prediction APIs. In USENIX. 601--618.  Florian Tram\u00e8r Fan Zhang Ari Juels Michael K. Reiter and Thomas Ristenpart. 2016. Stealing Machine Learning Models via Prediction APIs. In USENIX. 601--618."},{"key":"e_1_3_2_2_50_1","unstructured":"Jonathan Uesato Brendan O'Donoghue Pushmeet Kohli and A\u00e4ron van den Oord. 2018. Adversarial Risk and the Dangers of Evaluating Against Weak Attacks. In ICML. 5032--5041.  Jonathan Uesato Brendan O'Donoghue Pushmeet Kohli and A\u00e4ron van den Oord. 2018. Adversarial Risk and the Dangers of Evaluating Against Weak Attacks. In ICML. 5032--5041."},{"key":"e_1_3_2_2_51_1","unstructured":"Cihang Xie Yuxin Wu Laurens van der Maaten Alan L. Yuille and Kaiming He. 2019. Feature Denoising for Improving Adversarial Robustness. In CVPR. 501--509.  Cihang Xie Yuxin Wu Laurens van der Maaten Alan L. Yuille and Kaiming He. 2019. Feature Denoising for Improving Adversarial Robustness. In CVPR. 501--509."},{"key":"e_1_3_2_2_52_1","volume-title":"DeepObfuscation: Securing the Structure of Convolutional Neural Networks via Knowledge Distillation. arXiv preprint","author":"Xu Hui","year":"2018","unstructured":"Hui Xu , Yuxin Su , Zirui Zhao , Yangfan Zhou , Michael R. Lyu , and Irwin King . 2018b. DeepObfuscation: Securing the Structure of Convolutional Neural Networks via Knowledge Distillation. arXiv preprint , Vol. 1806 .10313 ( 2018 ). arxiv: 1806.10313 Hui Xu, Yuxin Su, Zirui Zhao, Yangfan Zhou, Michael R. Lyu, and Irwin King. 2018b. DeepObfuscation: Securing the Structure of Convolutional Neural Networks via Knowledge Distillation. arXiv preprint, Vol. 1806.10313 (2018). arxiv: 1806.10313"},{"key":"e_1_3_2_2_53_1","volume-title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks. In NDSS.","author":"Xu Weilin","year":"2018","unstructured":"Weilin Xu , David Evans , and Yanjun Qi . 2018 a. Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks. In NDSS. Weilin Xu, David Evans, and Yanjun Qi. 2018a. Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks. In NDSS."}],"event":{"name":"ASIA CCS '22: ACM Asia Conference on Computer and Communications Security","location":"Nagasaki Japan","acronym":"ASIA CCS '22","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3488932.3497752","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3488932.3497752","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T20:48:28Z","timestamp":1750193308000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3488932.3497752"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,5,30]]},"references-count":53,"alternative-id":["10.1145\/3488932.3497752","10.1145\/3488932"],"URL":"https:\/\/doi.org\/10.1145\/3488932.3497752","relation":{},"subject":[],"published":{"date-parts":[[2022,5,30]]},"assertion":[{"value":"2022-05-30","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}