Internet Society

2020

Citations in the corpus

• Property Inference Attacks on Fully Connected Neural Networks using Permutation Invariant Representations (2018, background): “This assumption is reasonable and quite common nowadays [5, 25, 39].”
• A Comprehensive Survey on Poisoning Attacks and Countermeasures in Machine Learning (2022, background): “In targeted poisoning attacks, the adversarial goal is to force the target model to produce abnormal predictions on particular inputs [74, 111, 119].”
• ABS: Scanning Neural Networks for Back-doors by Artificial Brain Stimulation (2019, methodology): “The lower sub-table presents the results for downloaded models trojaned by others, with column 4 the LeNet models from [5], and columns 5-7 the three models from [38], and the last three columns the three models from [25].”
• Backdoor Embedding in Convolutional Neural Network Models via Invisible Perturbation (2018, background): “Some very recent works [21, 33, 34] have proposed a similar concept as ours– neural network trojan attacks.”