# An Ontological Knowledge Base of Poisoning Attacks on Deep Neural Networks
## 8 Conclusions and Future Work
Available online: [[https://neo4j.com/](https://neo4j.com/)]([https://neo4j.com/](https://neo4j.com/)) (accessed on 14 May 2021). * _[PERSON]_ Neosemantics--A Plugin That Enables the Use of RDF in Neo4j. Available online: [[https://github.com/neo4j-labs/neosemantics](https://github.com/neo4j-labs/neosemantics)]([https://github.com/neo4j-labs/neosemantics](https://github.com/neo4j-labs/neosemantics)) (accessed on 15 March 2022). * _[PERSON] et al. (2021)_ [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Invisible Backdoor Attacks on Deep Neural Networks Via Steganography and Regularization. _IEEE Trans. Dependable Secur. Comput._**2021**, _18_, 2088-2105. [CrossRef]
* _[PERSON] et al. (2020)_ [PERSON]; [PERSON]; [PERSON] Poisoning attack on show and tell model and defense using autoencoder in electric factory. In Proceedings of the 2020 IEEE International Conference on Big Data and Smart Computing (BigComp), Busan, Korea, 19-22 February 2020; pp. 538-541. [CrossRef]
* _[PERSON] (2020)_ [PERSON]; [PERSON] Backdooring Convolutional Neural Networks via Targeted Weight Perturbations. In Proceedings of the 2020 IEEE International Joint Conference on Biometrics (IJCB), Houston, TX, USA, 28 September 2020-1 October 2020; pp. 1-9. [CrossRef]
* _[PERSON] et al. (2018)_ [PERSON]; [PERSON]; [PERSON]; [PERSON] Analyzing Federated Learning through an Adversarial Lens. _Proc. Int. Conf. Mach. Learn._**2018**, _97_, 634-643. * _[PERSON] et al. (2021)_ [PERSON]; [PERSON]; [PERSON]; [PERSON] Deep Model Poisoning Attack on Federated Learning. _Future Internet_**2021**, _13_, 73. [CrossRef]
* _[PERSON] and [PERSON] (2019)_ [PERSON]; [PERSON] Trojan Attacks on Wireless Signal Classification with Adversarial Machine Learning. In Proceedings of the 2019 IEEE International Symposium on Dynamic Spectrum Access Networks (DySPAN), Newark, NJ, USA, 11-14 November 2019; pp. 1-6. [CrossRef]
* _[PERSON] et al. (2020)_ [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Backdoor Embedding in Convolutional Neural Network Models via Invisible Perturbation. In Proceedings of the Tenth ACM Conference on Data and Application Security and Privacy (CODASP'20), New Orleans, LA, USA, 16-18 March 2020; Association for Computing Machinery: New York, NY, USA, 2020; pp. 97-108. [CrossRef]
* _[PERSON] et al. (2020)_ [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Malicious Attacks against Deep Reinforcement Learning Interpretations. In Proceedings of the 26 th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining, Virtual, 6-10 July 2020; ACM: New York, NY, USA, 2020; pp. 472-482. [CrossRef]
* _[PERSON] et al. (2022)_ [PERSON]; [PERSON]; [PERSON]; [PERSON] One-to-N & N-to-One: Two Advanced Backdoor Attacks Against Deep Learning Models. _IEEE Trans. Dependable Secur. Comput._**2022**, _19_, 1562-1578. [CrossRef]
* _[PERSON] et al. (2020)_ [PERSON]; [PERSON]; [PERSON]; [PERSON] Poisoning the (Data) Well in ML-Based CAD: A Case Study of Hiding Lithographic Hotspots. In Proceedings of the 2020 Design, Automation & Test in Europe Conference & Exhibition (DATE), Grenoble, France, 15 June 2020; pp. 306-309. [CrossRef]
* _[PERSON] et al. (2021)_ [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Practical Attacks on Deep Neural Networks by Memory Trojaning. _IEEE Trans. Comput. Des. Integr. Circuits Syst._**2021**, _40_, 1230-1243. [CrossRef]
* _[PERSON] et al. (2020)_ [PERSON]; [PERSON]; [PERSON]; [PERSON] Composite Backdoor Attack for Deep Neural Network by Mixing Existing Benign Features. In _Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security_; ACM: New York, NY, USA, 2020; pp. 113-131. [CrossRef]
* _[PERSON] et al. (2019)_ [PERSON]; [PERSON]; [PERSON] A Backdoor Attack Against LSTM-Based Text Classification Systems. _IEEE Access_**2019**, \(7\),_ 138872-138878. [CrossRef]
* _[PERSON] et al. (2020)_ [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Clean-Label Backdoor Attacks on Video Recognition Models.