# An Ontological Knowledge Base of Poisoning Attacks on Deep Neural Networks
## 6 DNN Poisoning Attacks Ontology (DNNPAO) and Knowledge Base Construction
### DNNPAO Construction  
An ontology is a piece of semantic information that is written by using a semantic language to describe things and the relationships between these things. There are several semantic languages; in this paper, we use the web ontology language (OWL) to describe our ontology. To develop the ontology by using the OWL semantic language, the Protege tool ([PERSON] et al., 2019) and webprotege.stanford.edu ([PERSON] et al., 2019) were used. The DNNPAO ontology has 45 classes that include the main classes and subclasses as shown in Figure 7. The definition of the main classes of the DNNPAO ontology are described in Table 9. Table 10 shows object properties, which are the relationships between the class (nodes), which has domains, and ranges. In addition, it has 107 individuals that are the 55 attacks and the 52 papers that propose these attacks are shown in Table 11. \begin{table}
\begin{tabular}{l l l} \hline \hline
**Class Label** & **Definition** & **Class Type** \\ \hline Attacks & Represent poisoning attacks against DNNs & super class (Thing) \\ \hline Attack vectors & Represent the mechanisms that attackers use to exploit the DNNs’ vulnerabilities. & super class (Thing) \\ \hline Security violation & A violation on the DNNs caused by an attack. & super class (Thing) \\ \hline Triggers & A hidden malicious functionality added to DNNs to activate Trojans and Backdoors. & super class (Thing) \\ \hline Attackers knowledge & Define the knowledge that an adversary has of the targeted model. & super class (Thing) \\ \hline Access impacts & The adversaries’ capability of gaining access to DNNs. & super class (Thing) \\ \hline Models’ architectures & The architecture of DNNs’ target models. & super class (Thing) \\ \hline Papers & Represent the published research papers that proposed those attacks. & super class (Thing) \\ \hline \hline \end{tabular}
\end{table} 
Table 9: The definition of the main classes in DNNPAO. Figure 7: The DNNPAO ontology including classes and properties. We have mapped the 55 extracted attacks as individuals, which were added to the DNNPAO ontology with their relations to the corresponding classes and subclasses; these attacks connected with their papers as shown in Table 11. As shown in Figure 8, these three examples of individuals (attacks) appear in the DNNPAO ontology at webprotege.stanford.edu [32]. Attack1, Attack3, and Attack34 are individuals that have relations with multiple classes and subclasses; in other words, they are instances of these classes. In addition, they have a \"PublishedBy\" relationship with other individuals that are the papers where these attacks were published. For a full list of individuals (attacks) in DNNPAO, please refer to Appendix A. \begin{table}
\begin{tabular}{p{113.8 pt} p{113.8 pt} p{113.8 pt}} \hline \hline
**Object Properties** & **Definition** & **From -> To** \\ \hline Subclass of & A sub division of a class & Class \textgreater{} Sub Class \\ \hline Violates & A relationship of an attack to violate the security of a DNN. & Attacks \textgreater{} Security Violation \\ \hline Uses & The relationship between an attack and a trigger that, if exist, activates the attack. & Attacks \textgreater{} Triggers \\ \hline isTypeOf & Is a relationship indicates that an attack & Attacks \textgreater{} Attack Vectors \\  & is a type of an attack vector or an attackers & Attacks \textgreater{} Attackers knowledge scenario. \\ \hline Accesses & Represent the relation between an attack and the access possibility. & Attacks \textgreater{} Access Impacts \\ \hline Targets & Represent the connection of an attack and its DNN targeted model. & Attacks \textgreater{} Models Architectures \\ \hline PublishedBy & Is a relationship between the attacks and their reference. & Attacks \textgreater{} Papers \\ \hline \hline \end{tabular}
\end{table} 
Table 10: Definition of the main relationships in DNNPAO.