Abstract:Deep neural networks (DNNs) are increasingly used as the critical component of applications, bringing high computational costs. Many practitioners host their models on third-party platforms. This practice exposes DNNs to risks: A third party hosting the model may use a malicious deep learning framework to implement a backdoor attack. Our goal is to develop the realistic potential for backdoor attacks in third-party hosting platforms. We introduce a threatening and realistically implementable backdoor attack that is highly stealthy and flexible. We inject trojans by hijacking the built-in functions of the deep learning framework. Existing backdoor attacks rely on poisoning; its trigger is a special pattern superimposed on the input. Unlike existing backdoor attacks, the proposed sequential trigger is a specific sequence of clean image sets. Moreover, our attack is model agnostic and does not require retraining the model or modifying the parameters. Its stealthy is that injecting trojans will not change the model's prediction for a clean image, so existing backdoor defenses cannot detect it. Its flexibility lies in that adversary can remodify the trojan behavior at any time. Extensive experiments on multiple benchmarks with different frameworks demonstrate that our attack achieves a perfect success rate (up to 100%) with minimal damage to model performance. And we can inject multiple trojans which do not affect each other at the same time, trojans hidden in the framework make a universal backdoor attack possible. Analysis and experiments further show that state-of-the-art defenses are ineffective against our attacks. Our work suggests that backdoor attacks in the supply chain need to be urgently explored.

Trojan Attack On Deep Generative Models In Autonomous Driving

Poisoning Attack on Deep Generative Models in Autonomous Driving

Data Poisoning Attacks in Internet-of-Vehicle Networks: Taxonomy, State-of-The-Art, and Future Directions.

Clean-Annotation Backdoor Attack against Lane Detection Systems in the Wild

Don't Watch Me: A Spatio-Temporal Trojan Attack on Deep-Reinforcement-Learning-Augment Autonomous Driving

Driving into Danger: Adversarial Patch Attack on End-to-End Autonomous Driving Systems Using Deep Learning

Adversarial Attacks Against Traffic Sign Detection for Autonomous Driving

The Security of Internet of Vehicles Network: Adversarial Examples for Trajectory Mode Detection

Towards Autonomous Driving Model Resistant to Adversarial Attack

Attack End-to-End Autonomous Driving through Module-Wise Noise

The Devil is in the GAN: Backdoor Attacks and Defenses in Deep Generative Models

An Embarrassingly Simple Approach for Trojan Attack in Deep Neural Networks

Moving Target Defense for Deep Visual Sensing against Adversarial Examples

Stealthy and Flexible Trojan in Deep Learning Framework

An Analysis of Adversarial Attacks and Defenses on Autonomous Driving Models

MT-MTD: Muti-Training Based Moving Target Defense Trojaning Attack in Edged-AI Network

PG-Attack: A Precision-Guided Adversarial Attack Framework Against Vision Foundation Models for Autonomous Driving

Detecting stealthy cyberattacks on adaptive cruise control vehicles: A machine learning approach

Evaluating Adversarial Attacks on Driving Safety in Vision-Based Autonomous Vehicles

Mitigating Deep Learning Vulnerabilities from Adversarial Examples Attack in the Cybersecurity Domain

Attacking vision-based perception in end-to-end autonomous driving models