activity
20182026
most citedBackdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review

133 citations · 149 across the 13 of their papers we have counts for

collaborators

12 papers

cs.CR2026

From Multiplicity to Vulnerability: Privacy Amplification Risk from One-Dataset-Multiple-Model Exposure

Qirui Huang, Na Li, Hongsheng Hu +3

To efficiently exploit a valuable data source (e.g., facial or medical images), it is frequently harnessed to fulfill multiple learning objectives (e.g., facial recognition, age es…

cs.CR2025

Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks

Anmin Fu, Fanyu Meng, Huaibing Peng +5

The proposed UniGuard is the first unified online detection framework capable of simultaneously addressing adversarial examples and backdoor attacks. UniGuard builds upon two key i…

cs.CR2025

THEMIS: Towards Practical Intellectual Property Protection for Post-Deployment On-Device Deep Learning Models

Yujin Huang, Zhi Zhang, Qingchuan Zhao +2

On-device deep learning (DL) has rapidly gained adoption in mobile apps, offering the benefits of offline model inference and user privacy preservation over cloud-based approaches.…

cs.CR2024

Physical and Software Based Fault Injection Attacks Against TEEs in Mobile Devices: A Systemisation of Knowledge

Aaron Joy, Ben Soh, Zhi Zhang +2

Trusted Execution Environments (TEEs) are critical components of modern secure computing, providing isolated zones in processors to safeguard sensitive data and execute secure oper…

cs.CR20225 cited

Towards A Critical Evaluation of Robustness for Deep Learning Backdoor Countermeasures

Huming Qiu, Hua Ma, Zhi Zhang +4

Since Deep Learning (DL) backdoor attacks have been revealed as one of the most insidious adversarial attacks, a number of countermeasures have been developed with certain assumpti…

cs.CR20222 cited

Systematically Evaluation of Challenge Obfuscated APUFs

Yansong Gao, Jianrong Yao, Lihui Pang +4

As a well-known physical unclonable function that can provide huge number of challenge response pairs (CRP) with a compact design and fully compatibility with current electronic fa…