VerIDeep: Verifying Integrity of Deep Neural Networks through Sensitive-Sample Fingerprinting

H. Robbins and S. Monro, “A stochastic approximation method,” The annals of mathematical statistics , pp. 400–407, 1951

1951

Earlier work this paper cites.

F. Rosenblatt, “The Perceptron: A Probabilistic Model for Information Storage and Organization in the Brain.” Psychological review , vol. 65, no. 6, p. 386, 1958

1958

Earlier work this paper cites.

D. E. Rumelhart, G. E. Hinton, and R. J. Williams, “Learning Representations by Back-propagating Errors,” nature , vol. 323, no. 6088, p. 533, 1986

1986

Earlier work this paper cites.

Y. Le Cun, L. Jackel, B. Boser, J. Denker, H. Graf, I. Guyon, D. Henderson, R. Howard, and W. Hubbard, “Handwritten Digit Recognition: Applications of Neural Network Chips and Automatic Learning,” IEEE Communications Magazine , vol. 27, no. 11, pp. 41–46, 1989

1989

Earlier work this paper cites.

U. Feige, “A threshold of ln n for approximating set cover,” Journal of the ACM (JACM) , vol. 45, no. 4, pp. 634–652, 1998

1998

Earlier work this paper cites.

A. A. Ageev and M. I. Sviridenko, “Approximation algorithms for maximum coverage and max cut with given sizes of parts,” in International Conference on Integer Programming and Combinatorial Optimization . Springer, 1999, pp. 17–30

1999

Earlier work this paper cites.

A. M. Azab, P. Ning, Z. Wang, X. Jiang, X. Zhang, and N. C. Skalsky, “HyperSentry: Enabling Stealthy In-context Measurement of Hypervisor Integrity,” in ACM Conference on Computer and Communications Security , 2010

2010

Earlier work this paper cites.

J. M. McCune, Y. Li, N. Qu, Z. Zhou, A. Datta, V. Gligor, and A. Perrig, “TrustVisor: Efficient TCB Reduction and Attestation,” in IEEE Symposium on Security and Privacy , 2010

2010

Earlier work this paper cites.

Z. Wang and X. Jiang, “HyperSafe: A Lightweight Approach to Provide Lifetime Hypervisor Control-Flow Integrity,” in IEEE Symposium on Security and Privacy , 2010

2010

Earlier work this paper cites.

K. D. Bowers, M. Van Dijk, A. Juels, A. Oprea, and R. L. Rivest, “How to tell if your cloud files are vulnerable to drive crashes,” in ACM conference on Computer and communications security , 2011

2011

Earlier work this paper cites.

S. Bugiel, S. Nürnberger, T. Pöppelmann, A.-R. Sadeghi, and T. Schneider, “Amazonia: when elasticity snaps back,” in ACM conference on Computer and communications security , 2011

2011

Earlier work this paper cites.

M. Mulazzani, S. Schrittwieser, M. Leithner, M. Huber, and E. R. Weippl, “Dark clouds on the horizon: Using cloud storage as attack vector and online slack space.” in USENIX security symposium , 2011

2011

Earlier work this paper cites.

J. Somorovsky, M. Heiderich, M. Jensen, J. Schwenk, N. Gruschka, and L. Lo Iacono, “All your clouds are belong to us: security analysis of cloud management interfaces,” in ACM workshop on Cloud computing security workshop , 2011

2011

Earlier work this paper cites.

Y. Zhang, A. Juels, A. Oprea, and M. K. Reiter, “Homealone: Co-residency detection in the cloud via side-channel analysis,” in 2011 IEEE symposium on security and privacy . IEEE, 2011, pp. 313–328

2011

Earlier work this paper cites.

B. Biggio, G. Fumera, F. Roli, and L. Didaci, “Poisoning adaptive biometric systems,” in Joint IAPR International Workshops on Statistical Techniques in Pattern Recognition and Structural and Syntactic Pattern Recognition , 2012

2012

Earlier work this paper cites.

B. Biggio, B. Nelson, and P. Laskov, “Poisoning attacks against support vector machines,” in Proceedings of the 29th International Coference on International Conference on Machine Learning . Omnipress, 2012, pp. 1467–1474

2012

Earlier work this paper cites.

I. Anati, S. Gueron, S. Johnson, and V. Scarlata, “Innovative technology for cpu based attestation and sealing,” in Workshop on Hardware Architectural Support for Security and Privacy , 2013

2013

Earlier work this paper cites.

A. Geigel, “Neural network trojan,” Journal of Computer Security , vol. 21, no. 2, pp. 191–232, 2013

2013

Earlier work this paper cites.

F. McKeen, I. Alexandrovich, A. Berenzon, C. V. Rozas, H. Shafi, V. Shanbhogue, and U. R. Savagaonkar, “Innovative instructions and software model for isolated execution.” in Workshop on Hardware Architectural Support for Security and Privacy , 2013

2013

Earlier work this paper cites.

C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, and R. Fergus, “Intriguing properties of neural networks,” arXiv preprint arXiv:1312.6199 , 2013

Original

2013

Earlier work this paper cites.

M. Courbariaux, Y. Bengio, and J.-P. David, “Training deep neural networks with low precision multiplications,” arXiv preprint arXiv:1412.7024 , 2014

Original

2014

Earlier work this paper cites.

——, “Unsupervised learning trojan,” Ph.D. dissertation, Nova Southeastern University, 2014

2014

Earlier work this paper cites.

Y. Gong, L. Liu, M. Yang, and L. Bourdev, “Compressing deep convolutional networks using vector quantization,” arXiv preprint arXiv:1412.6115 , 2014

Original

2014

Earlier work this paper cites.

I. J. Goodfellow, J. Shlens, and C. Szegedy, “Explaining and harnessing adversarial examples,” arXiv preprint arXiv:1412.6572 , 2014

Original

2014

Cited alongside, same era.

A. Y. Hannun, C. Case, J. Casper, B. Catanzaro, G. Diamos, E. Elsen, R. Prenger, S. Satheesh, S. Sengupta, A. Coates, and A. Y. Ng, “Deep Speech: Scaling Up End-to-end Speech Recognition,” CoRR , vol. abs/1412.5567, 2014. [Online]. Available: http://arxiv.org/abs/1412.5567

Original

2014

Cited alongside, same era.

Y. Sun, G. Petracca, and T. Jaeger, “Inevitable Failure: The Flawed Trust Assumption in the Cloud,” in ACM Workshop on Cloud Computing Security , 2014

2014

Cited alongside, same era.

K. He, X. Zhang, S. Ren, and J. Sun, “Deep Residual Learning for Image Recognition,” CoRR , vol. abs/1512.03385, 2015. [Online]. Available: http://arxiv.org/abs/1512.03385

Original

2015

Cited alongside, same era.

T. Gu, B. Dolan-Gavitt, and S. Garg, “Badnets: Identifying vulnerabilities in the machine learning model supply chain,” CoRR , vol. abs/1708.06733, 2017. [Online]. Available: http://arxiv.org/abs/1708.06733

Original

2017

Later among the works it cites.

P. W. Koh and P. Liang, “Understanding black-box predictions via influence functions,” arXiv preprint arXiv:1703.04730 , 2017

Original

2017

Later among the works it cites.

C. Liu, B. Li, Y. Vorobeychik, and A. Oprea, “Robust linear regression against training data poisoning,” in ACM Workshop on Artificial Intelligence and Security , 2017

2017

Later among the works it cites.

Y. Liu, Y. Xie, and A. Srivastava, “Neural trojans,” in IEEE International Conference on Computer Design , 2017

2017

Later among the works it cites.

D. Meng and H. Chen, “Magnet: a two-pronged defense against adversarial examples,” in ACM Conference on Computer and Communications Security . ACM, 2017