Abstract:In the software engineering community, deep learning (DL) has recently been applied to many source code processing tasks. Due to the poor interpretability of DL models, their security vulnerabilities require scrutiny. Recently, researchers have identified an emergent security threat, namely poison attack. The attackers aim to inject insidious backdoors into models by poisoning the training data with poison samples. Poisoned models work normally with clean inputs but produce targeted erroneous results with poisoned inputs embedded with triggers. By activating backdoors, attackers can manipulate the poisoned models in security-related scenarios. To verify the vulnerability of existing deep source code processing models to the poison attack, we present a poison attack framework for source code named CodePoisoner as a strong imaginary enemy. CodePoisoner can produce compilable even human-imperceptible poison samples and attack models by poisoning the training data with poison samples. To defend against the poison attack, we further propose an effective defense approach named CodeDetector to detect poison samples in the training data. CodeDetector can be applied to many model architectures and effectively defend against multiple poison attack approaches. We apply our CodePoisoner and CodeDetector to three tasks, including defect detection, clone detection, and code repair. The results show that (1) CodePoisoner achieves a high attack success rate (max: 100%) in misleading models to targeted erroneous behaviors. It validates that existing deep source code processing models have a strong vulnerability to the poison attack. (2) CodeDetector effectively defends against multiple poison attack approaches by detecting (max: 100%) poison samples in the training data. We hope this work can help practitioners notice the poison attack and inspire the design of more advanced defense techniques.

Poisoning and Evasion Attacks Against Deep Learning Algorithms in Autonomous Vehicles

Data Poisoning Attacks in Internet-of-Vehicle Networks: Taxonomy, State-of-The-Art, and Future Directions.

Poisoning Attack on Deep Generative Models in Autonomous Driving

Adversarial Attacks Against Traffic Sign Detection for Autonomous Driving

Deep learning adversarial attacks and defenses in autonomous vehicles: a systematic literature review from a safety perspective

Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning

Robust Roadside Physical Adversarial Attack Against Deep Learning in Lidar Perception Modules

Safe Driving Adversarial Trajectory Can Mislead: Towards More Stealthy Adversarial Attack Against Autonomous Driving Prediction Module

Optimal Smoothing Distribution Exploration for Backdoor Neutralization in Deep Learning-based Traffic Systems

Accelerating Poisoning Attack Through Momentum And Adam Algorithms

Driving into Danger: Adversarial Patch Attack on End-to-End Autonomous Driving Systems Using Deep Learning

Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses

Fooling the Eyes of Autonomous Vehicles: Robust Physical Adversarial Examples Against Traffic Sign Recognition Systems

Poisoning Attacks on Federated Learning for Autonomous Driving

AdvDoor: Adversarial Backdoor Attack of Deep Learning System

Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Driving

Leveraging Model Poisoning Attacks on License Plate Recognition Systems

Poison Attack and Defense on Deep Source Code Processing Models

Attacking vision-based perception in end-to-end autonomous driving models

Privacy-Preserving Object Detection with Poisoning Recognition for Autonomous Vehicles.

Emerging Threats in Deep Learning-Based Autonomous Driving: A Comprehensive Survey