Backdoor Attacks against Transfer Learning with Pre-trained Deep Learning Models

S. Hawkins, H. He, G. Williams, and R. Baxter, “Outlier detection using replicator neural networks,” in International Conference on Data Warehousing and Knowledge Discovery . Springer, 2002, pp. 170–180

2002

Earlier work this paper cites.

S. J. Pan and Q. Yang, “A survey on transfer learning,” IEEE Transactions on Knowledge and Data Engineering (TKDE) , vol. 22, no. 10, pp. 1345–1359, 2010

2010

Earlier work this paper cites.

B. Biggio, B. Nelson, and P. Laskov, “Poisoning attacks against support vector machines,” arXiv preprint arXiv:1206.6389 , 2012

Original

2012

Earlier work this paper cites.

Y. Bengio, A. Courville, and P. Vincent, “Representation learning: A review and new perspectives,” IEEE transactions on pattern analysis and machine intelligence , vol. 35, no. 8, pp. 1798–1828, 2013

2013

Earlier work this paper cites.

S. Han, J. Pool, J. Tran, and W. J. Dally, “Learning both weights and connections for efficient neural networks,” in Proceedings of the 28th International Conference on Neural Information Processing Systems - Volume 1 . MIT Press, 2015, pp. 1135–1143

2015

Earlier work this paper cites.

A. Polyak and L. Wolf, “Channel-level acceleration of deep face representations,” IEEE Access , vol. 3, pp. 2163–2175, 2015

2015

Earlier work this paper cites.

S. Han, H. Mao, and W. J. Dally, “Deep compression: Compressing deep neural networks with pruning, trained quantization and huffman coding,” arXiv preprint arXiv:1510.00149 , 2015

Original

2015

Earlier work this paper cites.

H. Xiao, B. Biggio, B. Nelson, H. Xiao, C. Eckert, and F. Roli, “Support vector machines under adversarial label contamination,” Neurocomputing , vol. 160, pp. 53–62, 2015

2015

Earlier work this paper cites.

H. Xiao, B. Biggio, G. Brown, G. Fumera, C. Eckert, and F. Roli, “Is feature selection secure against training data poisoning?” in International Conference on Machine Learning , 2015, pp. 1689–1698

2015

Earlier work this paper cites.

N. Papernot, P. McDaniel, X. Wu, S. Jha, and A. Swami, “Distillation as a defense to adversarial perturbations against deep neural networks,” arXiv preprint arXiv:1511.04508 , 2015

Original

2015

Earlier work this paper cites.

H. Li, A. Kadav, I. Durdanovic, H. Samet, and H. P. Graf, “Pruning filters for efficient convnets,” arXiv preprint arXiv:1608.08710 , 2016

Original

2016

Earlier work this paper cites.

P. Molchanov, S. Tyree, T. Karras, T. Aila, and J. Kautz, “Pruning convolutional neural networks for resource efficient inference,” arXiv preprint arXiv:1611.06440 , 2016

Original

2016

Earlier work this paper cites.

N. Carlini and D. Wagner, “Towards evaluating the robustness of neural networks,” arXiv preprint arXiv:1608.04644 , 2016

Original

2016

Cited alongside, same era.

Y. Ganin, E. Ustinova, H. Ajakan, P. Germain, H. Larochelle, F. Laviolette, M. Marchand, and V. Lempitsky, “Domain-adversarial training of neural networks,” The Journal of Machine Learning Research , vol. 17, no. 1, pp. 2096–2030, 2016

2016

Cited alongside, same era.

Y. Ding, J. Yu, and J. Jiang, “Recurrent neural networks with auxiliary labels for cross-domain opinion target extraction,” in Thirty-First AAAI Conference on Artificial Intelligence , 2017

2017

Cited alongside, same era.

Y. Liu, Y. Xie, and A. Srivastava, “Neural trojans,” in Computer Design (ICCD), 2017 IEEE International Conference on . IEEE, 2017, pp. 45–48

2017

Cited alongside, same era.

U. Food, D. Administration et al. , “Fda permits marketing of artificial intelligence-based device to detect certain diabetes-related eye problems,” News Release, April , 2018

2018

Later among the works it cites.

P. Kendrick, T. Baker, Z. Maamar, A. Hussain, R. Buyya, and D. Al-Jumeily, “An efficient multi-cloud service composition using a distributed multiagent-based, memory-driven approach,” IEEE Transactions on Sustainable Computing , 2018

2018

Later among the works it cites.

B. Wang, Y. Yao, B. Viswanath, H. Zheng, and B. Y. Zhao, “With great training comes great vulnerability: Practical attacks against transfer learning,” in 27th { \{ USENIX } \} Security Symposium ( { \{ USENIX } \} Security 18) , 2018, pp. 1281–1297

2018

Later among the works it cites.

B. Wang, Y. Yao, B. Viswanath, H. Zheng, and B. Y. Zhao, “With great training comes great vulnerability: Practical attacks against transfer learning,” in 27th USENIX Security Symposium . USENIX Association, 2018, pp. 1281–1297

2018