PoTrojan: powerful neural-level trojan designs in deep learning models
Not on the map. Why?
Abstract (arXiv)
With the popularity of deep learning (DL), artificial intelligence (AI) has been applied in many areas of human life. Neural network or artificial neural network (NN), the main technique behind DL, has been extensively studied to facilitate computer vision and natural language recognition. However, the more we rely on information technology, the more vulnerable we are. That is, malicious NNs could bring huge threat in the so-called coming AI era. In this paper, for the first time in the literature, we propose a novel approach to design and insert powerful neural-level trojans or PoTrojan in pre-trained NN models. Most of the time, PoTrojans remain inactive, not affecting the normal functions of their host NN models. PoTrojans could only be triggered in very rare conditions. Once activated, however, the PoTrojans could cause the host NN models to malfunction, either falsely predicting or classifying, which is a significant threat to human society of the AI era. We would explain the principles of PoTrojans and the easiness of designing and inserting them in pre-trained deep learning models. PoTrojans doesn't modify the existing architecture or parameters of the pre-trained models, without re-training. Hence, the proposed method is very efficient.
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). First posted on arXiv 8 Feb 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 5; 2022: 2; 2023: 0; 2024: 2.
9 papers.
- 2021Robust Machine Learning Systems: Challenges, Current Trends, Perspectives, and the Road Aheadcited by 40
- 2021Robust Backdoor Attacks against Deep Neural Networks in Real Physical Worldcited by 20
- 2021SoWaF: Shuffling of Weights and Feature Maps: A Novel Hardware Intrinsic Attack (HIA) on Convolutional Neural Network (CNN)cited by 3
- 2021FeSHI: Feature Map Based Stealthy Hardware Intrinsic Attackcited by 1
- 2021SanitAIs: Unsupervised Data Augmentation to Sanitize Trojaned Neural Networkscited by 1
- 2022Identifying Backdoor Attacks in Federated Learning via Anomaly Detectioncited by 1
- 2024DeepBaR: Fault Backdoor Attack on Deep Neural Network Layerscited by 1
- 2022Privacy protection based on mask templatecited by 0
- 2024A Survey of Trojan Attacks and Defenses to Deep Neural Networkscited by 0
- 2024A Survey of Trojan Attacks and Defenses to Deep Neural Networks15 Aug 2024
- 2024DeepBaR: Fault Backdoor Attack on Deep Neural Network Layers30 Jul 2024
- 2022Privacy protection based on mask template13 Feb 2022
- 2022Identifying Backdoor Attacks in Federated Learning via Anomaly Detection9 Feb 2022
- 2021SanitAIs: Unsupervised Data Augmentation to Sanitize Trojaned Neural Networks9 Sep 2021
- 2021FeSHI: Feature Map Based Stealthy Hardware Intrinsic Attack13 Jun 2021
- 2021Robust Backdoor Attacks against Deep Neural Networks in Real Physical World15 Apr 2021
- 2021SoWaF: Shuffling of Weights and Feature Maps: A Novel Hardware Intrinsic Attack (HIA) on Convolutional Neural Network (CNN)16 Mar 2021
- 2021Robust Machine Learning Systems: Challenges, Current Trends, Perspectives, and the Road Ahead4 Jan 2021