{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T14:49:05Z","timestamp":1784213345134,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":55,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,8,14]],"date-time":"2022-08-14T00:00:00Z","timestamp":1660435200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Key-Area Research and Development Program of Guangdong Province","award":["2018B010107005, 2020B0101100001"],"award-info":[{"award-number":["2018B010107005, 2020B0101100001"]}]},{"name":"Guangdong Basic and Applied Basic Research Foundation","award":["2019B1515130001"],"award-info":[{"award-number":["2019B1515130001"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U1811264,U1811262,U1811261,U1911203,U2001211"],"award-info":[{"award-number":["U1811264,U1811262,U1811261,U1911203,U2001211"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,8,14]]},"DOI":"10.1145\/3534678.3539241","type":"proceedings-article","created":{"date-parts":[[2022,8,12]],"date-time":"2022-08-12T19:06:41Z","timestamp":1660331201000},"page":"2367-2376","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":31,"title":["Availability Attacks Create Shortcuts"],"prefix":"10.1145","author":[{"given":"Da","family":"Yu","sequence":"first","affiliation":[{"name":"Sun Yat-sen University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Huishuai","family":"Zhang","sequence":"additional","affiliation":[{"name":"Microsoft Research Asia, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wei","family":"Chen","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jian","family":"Yin","sequence":"additional","affiliation":[{"name":"Sun Yat-sen University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tie-Yan","family":"Liu","sequence":"additional","affiliation":[{"name":"Microsoft Research Asia, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2022,8,14]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Understanding deep neural networks with rectified linear units. arXiv preprint arXiv:1611.01491","author":"Arora Raman","year":"2016","unstructured":"Raman Arora, Amitabh Basu, Poorya Mianjy, and Anirbit Mukherjee. 2016. Understanding deep neural networks with rectified linear units. arXiv preprint arXiv:1611.01491 (2016)."},{"key":"e_1_3_2_1_2_1","volume":"201","author":"Barreno Marco","unstructured":"Marco Barreno, Blaine Nelson, Anthony D Joseph, and J Doug Tygar. 2010. The security of machine learning. Machine Learning (2010).","journal-title":"J Doug Tygar."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01270-0_28"},{"key":"e_1_3_2_1_4_1","volume-title":"Poisoning attacks against support vector machines. arXiv preprint arXiv:1206.6389","author":"Biggio Battista","year":"2012","unstructured":"Battista Biggio, Blaine Nelson, and Pavel Laskov. 2012. Poisoning attacks against support vector machines. arXiv preprint arXiv:1206.6389 (2012)."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3264418"},{"key":"e_1_3_2_1_6_1","unstructured":"Nicholas Carlini Florian Tramer Eric Wallace Matthew Jagielski Ariel HerbertVoss Katherine Lee Adam Roberts Tom Brown Dawn Song Ulfar Erlingsson et al. 2020. Extracting Training Data from Large Language Models. arXiv preprint arXiv:2012.07805 (2020)."},{"key":"e_1_3_2_1_7_1","volume-title":"Big Self-Supervised Models are Strong Semi-Supervised Learners. arXiv preprint arXiv:2006.10029","author":"Chen Ting","year":"2020","unstructured":"Ting Chen, Simon Kornblith, Kevin Swersky, Mohammad Norouzi, and Geoffrey Hinton. 2020. Big Self-Supervised Models are Strong Semi-Supervised Learners. arXiv preprint arXiv:2006.10029 (2020)."},{"key":"e_1_3_2_1_8_1","volume-title":"LowKey: leveraging adversarial attacks to protect social media users from facial recognition. arXiv preprint arXiv:2101.07922","author":"Cherepanova Valeriia","year":"2021","unstructured":"Valeriia Cherepanova, Micah Goldblum, Harrison Foley, Shiyuan Duan, John Dickerson, Gavin Taylor, and Tom Goldstein. 2021. LowKey: leveraging adversarial attacks to protect social media users from facial recognition. arXiv preprint arXiv:2101.07922 (2021)."},{"key":"e_1_3_2_1_9_1","volume-title":"Bert: Pre-training of deep bidirectional transformers for language understanding. arXiv preprint arXiv:1810.04805","author":"Devlin Jacob","year":"2018","unstructured":"Jacob Devlin, Ming-Wei Chang, Kenton Lee, and Kristina Toutanova. 2018. Bert: Pre-training of deep bidirectional transformers for language understanding. arXiv preprint arXiv:1810.04805 (2018)."},{"key":"e_1_3_2_1_10_1","volume-title":"Improved regularization of convolutional neural networks with cutout. arXiv preprint arXiv:1708.04552","author":"DeVries Terrance","year":"2017","unstructured":"Terrance DeVries and Graham W Taylor. 2017. Improved regularization of convolutional neural networks with cutout. arXiv preprint arXiv:1708.04552 (2017)."},{"key":"e_1_3_2_1_11_1","volume-title":"Backdoor Attack with Imperceptible Input and Latent Modification. Advances in Neural Information Processing Systems","author":"Doan Khoa","year":"2021","unstructured":"Khoa Doan, Yingjie Lao, and Ping Li. 2021. Backdoor Attack with Imperceptible Input and Latent Modification. Advances in Neural Information Processing Systems (2021)."},{"key":"e_1_3_2_1_12_1","volume-title":"Learning to confuse: generating training time adversarial data with auto-encoder. arXiv preprint arXiv:1905.09027","author":"Feng Ji","year":"2019","unstructured":"Ji Feng, Qi-Zhi Cai, and Zhi-Hua Zhou. 2019. Learning to confuse: generating training time adversarial data with auto-encoder. arXiv preprint arXiv:1905.09027 (2019)."},{"key":"e_1_3_2_1_13_1","volume-title":"Preventing unauthorized use of proprietary data: Poisoning for secure dataset release. arXiv preprint arXiv:2103.02683","author":"Fowl Liam","year":"2021","unstructured":"Liam Fowl, Ping-yeh Chiang, Micah Goldblum, Jonas Geiping, Arpit Bansal, Wojtek Czaja, and Tom Goldstein. 2021. Preventing unauthorized use of proprietary data: Poisoning for secure dataset release. arXiv preprint arXiv:2103.02683 (2021)."},{"key":"e_1_3_2_1_14_1","volume-title":"Adversarial Examples Make Strong Poisons. arXiv preprint arXiv:2106.10807","author":"Fowl Liam","year":"2021","unstructured":"Liam Fowl, Micah Goldblum, Ping-yeh Chiang, Jonas Geiping, Wojtek Czaja, and Tom Goldstein. 2021. Adversarial Examples Make Strong Poisons. arXiv preprint arXiv:2106.10807 (2021)."},{"key":"e_1_3_2_1_15_1","volume-title":"Witches' brew: Industrial scale data poisoning via gradient matching. arXiv preprint arXiv:2009.02276","author":"Geiping Jonas","year":"2020","unstructured":"Jonas Geiping, Liam Fowl, W Ronny Huang, Wojciech Czaja, Gavin Taylor, Michael Moeller, and Tom Goldstein. 2020. Witches' brew: Industrial scale data poisoning via gradient matching. arXiv preprint arXiv:2009.02276 (2020)."},{"key":"e_1_3_2_1_16_1","volume-title":"Shortcut learning in deep neural networks. Nature Machine Intelligence","author":"Geirhos Robert","year":"2020","unstructured":"Robert Geirhos, J\u00f6rn-Henrik Jacobsen, Claudio Michaelis, Richard Zemel, Wieland Brendel, Matthias Bethge, and Felix A Wichmann. 2020. Shortcut learning in deep neural networks. Nature Machine Intelligence (2020)."},{"key":"e_1_3_2_1_17_1","volume-title":"Backdoor Attacks, and Defenses. arXiv preprint arXiv:2012.10544","author":"Goldblum Micah","year":"2020","unstructured":"Micah Goldblum, Dimitris Tsipras, Chulin Xie, Xinyun Chen, Avi Schwarzschild, Dawn Song, Aleksander Madry, Bo Li, and Tom Goldstein. 2020. Dataset Security for Machine Learning: Data Poisoning, Backdoor Attacks, and Defenses. arXiv preprint arXiv:2012.10544 (2020)."},{"key":"e_1_3_2_1_18_1","volume-title":"NIPS 2003 workshop on feature extraction and feature selection.","author":"Guyon Isabelle","year":"2003","unstructured":"Isabelle Guyon. 2003. Design of experiments of the NIPS 2003 variable selection benchmark. In NIPS 2003 workshop on feature extraction and feature selection."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00975"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"e_1_3_2_1_21_1","volume-title":"What shapes feature representations? exploring datasets, architectures, and training. arXiv preprint arXiv:2006.12433","author":"Hermann Katherine L","year":"2020","unstructured":"Katherine L Hermann and Andrew K Lampinen. 2020. What shapes feature representations? exploring datasets, architectures, and training. arXiv preprint arXiv:2006.12433 (2020)."},{"key":"e_1_3_2_1_22_1","volume-title":"The secretive company that might end privacy as we know it. The New York Times","author":"Hill Kashmir","year":"2020","unstructured":"Kashmir Hill. 2020. The secretive company that might end privacy as we know it. The New York Times (2020)."},{"key":"e_1_3_2_1_23_1","volume-title":"How photos of your kids are powering surveillance technology. The New York Times","author":"Hill Kashmir","year":"2019","unstructured":"Kashmir Hill and Aaron Krolik. 2019. How photos of your kids are powering surveillance technology. The New York Times (2019)."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"e_1_3_2_1_25_1","volume-title":"Unlearnable Examples: Making Personal Data Unexploitable. International Conference on Learning Representations","author":"Huang Hanxun","year":"2021","unstructured":"Hanxun Huang, Xingjun Ma, Sarah Monazam Erfani, James Bailey, and Yisen Wang. 2021. Unlearnable Examples: Making Personal Data Unexploitable. International Conference on Learning Representations (2021)."},{"key":"e_1_3_2_1_26_1","volume-title":"Neural tangent kernel: Convergence and generalization in neural networks. arXiv preprint arXiv:1806.07572","author":"Jacot Arthur","year":"2018","unstructured":"Arthur Jacot, Franck Gabriel, and Cl\u00e9ment Hongler. 2018. Neural tangent kernel: Convergence and generalization in neural networks. arXiv preprint arXiv:1806.07572 (2018)."},{"key":"e_1_3_2_1_27_1","unstructured":"Alex Krizhevsky and Geoffrey Hinton. 2009. Learning multiple layers of features from tiny images. (2009)."},{"key":"e_1_3_2_1_28_1","volume-title":"Fast autoaugment. arXiv preprint arXiv:1905.00397","author":"Lim Sungbin","year":"2019","unstructured":"Sungbin Lim, Ildoo Kim, Taesup Kim, Chiheon Kim, and Sungwoong Kim. 2019. Fast autoaugment. arXiv preprint arXiv:1905.00397 (2019)."},{"key":"e_1_3_2_1_29_1","volume-title":"On the limited memory BFGS method for large scale optimization. Mathematical programming","author":"Liu Dong C","year":"1989","unstructured":"Dong C Liu and Jorge Nocedal. 1989. On the limited memory BFGS method for large scale optimization. Mathematical programming (1989)."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.425"},{"key":"e_1_3_2_1_31_1","volume-title":"They Are Features': Adversarial Examples are Just Bugs, Too. Distill","author":"Nakkiran Preetum","year":"2019","unstructured":"Preetum Nakkiran. 2019. A Discussion of'Adversarial Examples Are Not Bugs, They Are Features': Adversarial Examples are Just Bugs, Too. Distill (2019)."},{"key":"e_1_3_2_1_32_1","volume-title":"NIPS Workshop on Deep Learning and Unsupervised Feature Learning","author":"Netzer Yuval","year":"2011","unstructured":"Yuval Netzer, Tao Wang, Adam Coates, Alessandro Bissacco, Bo Wu, and Andrew Y Ng. 2011. Reading digits in natural images with unsupervised feature learning. NIPS Workshop on Deep Learning and Unsupervised Feature Learning (2011)."},{"key":"e_1_3_2_1_33_1","volume-title":"Input-aware dynamic backdoor attack. arXiv preprint arXiv:2010.08138","author":"Nguyen Anh","year":"2020","unstructured":"Anh Nguyen and Anh Tran. 2020. Input-aware dynamic backdoor attack. arXiv preprint arXiv:2010.08138 (2020)."},{"key":"e_1_3_2_1_34_1","volume-title":"arXiv preprint arXiv:2102.10369","author":"Nguyen Anh","year":"2021","unstructured":"Anh Nguyen and Anh Tran. 2021. WaNet?Imperceptible Warping-based Backdoor Attack. arXiv preprint arXiv:2102.10369 (2021)."},{"key":"e_1_3_2_1_35_1","volume-title":"Probing neural network comprehension of natural language arguments. arXiv preprint arXiv:1907.07355","author":"Niven Timothy","year":"2019","unstructured":"Timothy Niven and Hung-Yu Kao. 2019. Probing neural network comprehension of natural language arguments. arXiv preprint arXiv:1907.07355 (2019)."},{"key":"e_1_3_2_1_36_1","volume-title":"Pytorch: An imperative style, high-performance deep learning library. Advances in neural information processing systems","author":"Paszke Adam","year":"2019","unstructured":"Adam Paszke, Sam Gross, Francisco Massa, Adam Lerer, James Bradbury, Gregory Chanan, Trevor Killeen, Zeming Lin, Natalia Gimelshein, Luca Antiga, et al. 2019. Pytorch: An imperative style, high-performance deep learning library. Advances in neural information processing systems (2019)."},{"key":"e_1_3_2_1_37_1","volume-title":"Large image datasets: A pyrrhic win for computer vision? arXiv preprint arXiv:2006.16923","author":"Prabhu Vinay Uday","year":"2020","unstructured":"Vinay Uday Prabhu and Abeba Birhane. 2020. Large image datasets: A pyrrhic win for computer vision? arXiv preprint arXiv:2006.16923 (2020)."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-24574-4_28"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"crossref","unstructured":"Olga Russakovsky Jia Deng Hao Su Jonathan Krause Sanjeev Satheesh Sean Ma Zhiheng Huang Andrej Karpathy Aditya Khosla Michael Bernstein et al. 2015. Imagenet large scale visual recognition challenge. International journal of computer vision (2015).","DOI":"10.1007\/s11263-015-0816-y"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6871"},{"key":"e_1_3_2_1_41_1","volume-title":"International Conference on Machine Learning.","author":"Schwarzschild Avi","year":"2021","unstructured":"Avi Schwarzschild, Micah Goldblum, Arjun Gupta, John P Dickerson, and Tom Goldstein. 2021. Just how toxic is data poisoning? a unified benchmark for backdoor and data poisoning attacks. In International Conference on Machine Learning."},{"key":"e_1_3_2_1_42_1","volume-title":"Poison frogs! targeted clean-label poisoning attacks on neural networks. arXiv preprint arXiv:1804.00792","author":"Shafahi Ali","year":"2018","unstructured":"Ali Shafahi, W Ronny Huang, Mahyar Najibi, Octavian Suciu, Christoph Studer, Tudor Dumitras, and Tom Goldstein. 2018. Poison frogs! targeted clean-label poisoning attacks on neural networks. arXiv preprint arXiv:1804.00792 (2018)."},{"key":"e_1_3_2_1_43_1","volume-title":"The pitfalls of simplicity bias in neural networks. arXiv preprint arXiv:2006.07710","author":"Shah Harshay","year":"2020","unstructured":"Harshay Shah, Kaustav Tamuly, Aditi Raghunathan, Prateek Jain, and Praneeth Netrapalli. 2020. The pitfalls of simplicity bias in neural networks. arXiv preprint arXiv:2006.07710 (2020)."},{"key":"e_1_3_2_1_44_1","volume-title":"USENIX Security Symposium.","author":"Shan Shawn","year":"2020","unstructured":"Shawn Shan, Emily Wenger, Jiayun Zhang, Huiying Li, Haitao Zheng, and Ben Y Zhao. 2020. Fawkes: Protecting privacy against unauthorized deep learning models. In USENIX Security Symposium."},{"key":"e_1_3_2_1_45_1","volume-title":"TensorClog: An imperceptible poisoning attack on deep neural network applications","author":"Shen Juncheng","year":"2019","unstructured":"Juncheng Shen, Xiaolei Zhu, and De Ma. 2019. TensorClog: An imperceptible poisoning attack on deep neural network applications. IEEE Access (2019)."},{"key":"e_1_3_2_1_46_1","volume-title":"Very deep convolutional networks for large-scale image recognition. arXiv preprint arXiv:1409.1556","author":"Simonyan Karen","year":"2014","unstructured":"Karen Simonyan and Andrew Zisserman. 2014. Very deep convolutional networks for large-scale image recognition. arXiv preprint arXiv:1409.1556 (2014)."},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v31i1.11231"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/3394486.3403064"},{"key":"e_1_3_2_1_49_1","volume-title":"Provable Defense Against Delusive Poisoning. arXiv preprint arXiv:2102.04716","author":"Tao Lue","year":"2021","unstructured":"Lue Tao, Lei Feng, Jinfeng Yi, Sheng-Jun Huang, and Songcan Chen. 2021. Provable Defense Against Delusive Poisoning. arXiv preprint arXiv:2102.04716 (2021)."},{"key":"e_1_3_2_1_50_1","volume-title":"Visualizing data using t-SNE. Journal of machine learning research","author":"der Maaten Laurens Van","year":"2008","unstructured":"Laurens Van der Maaten and Geoffrey Hinton. 2008. Visualizing data using t-SNE. Journal of machine learning research (2008)."},{"key":"e_1_3_2_1_51_1","volume-title":"Learning face representation from scratch. arXiv preprint arXiv:1411.7923","author":"Yi Dong","year":"2014","unstructured":"Dong Yi, Zhen Lei, Shengcai Liao, and Stan Z Li. 2014. Learning face representation from scratch. arXiv preprint arXiv:1411.7923 (2014)."},{"key":"e_1_3_2_1_52_1","volume-title":"Neural Tangent Generalization Attacks. In International Conference on Machine Learning. PMLR.","author":"Yuan Chia-Hung","year":"2021","unstructured":"Chia-Hung Yuan and Shan-Hung Wu. 2021. Neural Tangent Generalization Attacks. In International Conference on Machine Learning. PMLR."},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00612"},{"key":"e_1_3_2_1_54_1","volume-title":"mixup: Beyond empirical risk minimization. arXiv preprint arXiv:1710.09412","author":"Zhang Hongyi","year":"2017","unstructured":"Hongyi Zhang, Moustapha Cisse, Yann N Dauphin, and David Lopez-Paz. 2017. mixup: Beyond empirical risk minimization. arXiv preprint arXiv:1710.09412 (2017)."},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/3447548.3467405"}],"event":{"name":"KDD '22: The 28th ACM SIGKDD Conference on Knowledge Discovery and Data Mining","location":"Washington DC USA","acronym":"KDD '22","sponsor":["SIGMOD ACM Special Interest Group on Management of Data","SIGKDD ACM Special Interest Group on Knowledge Discovery in Data"]},"container-title":["Proceedings of the 28th ACM SIGKDD Conference on Knowledge Discovery and Data Mining"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3534678.3539241","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3534678.3539241","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T18:59:58Z","timestamp":1750186798000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3534678.3539241"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,8,14]]},"references-count":55,"alternative-id":["10.1145\/3534678.3539241","10.1145\/3534678"],"URL":"https:\/\/doi.org\/10.1145\/3534678.3539241","relation":{},"subject":[],"published":{"date-parts":[[2022,8,14]]},"assertion":[{"value":"2022-08-14","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}