Invisible and Efficient Backdoor Attacks for Compressed Deep Neural Networks

Huy Phan; Yi Xie; Jian Liu; Yingying Chen; Bo Yuan

ICASSP 2022accepted0 citations

Invisible and Efficient Backdoor Attacks for Compressed Deep Neural Networks

Huy Phan, Yi Xie, Jian Liu, Yingying Chen, Bo Yuan

Abstract

Compressed deep neural network (DNN) models have been widely deployed in many resource-constrained platforms and devices. However, the security issue of the compressed models, especially their vulnerability against backdoor attacks, is not well explored yet. In this paper, we study the feasibility of practical backdoor attacks for the compressed DNNs. More specifically, we propose a universal adversarial perturbation (UAP)-based approach to achieve both high attack stealthiness and high attack efficiency simultaneously. Evaluation results across different DNN models and datasets with various compression ratios demonstrate our approach’s superior performance compared with the existing solutions.

BibTeX

@inproceedings{icassp2022_invisibleandeffi,
  title = {Invisible and Efficient Backdoor Attacks for Compressed Deep Neural Networks},
  author = {Huy Phan and Yi Xie and Jian Liu and Yingying Chen and Bo Yuan},
  booktitle = {ICASSP 2022},
  year = {2022}
}