{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/targeted-attack-against-deep-neural-networks-1","title":"Targeted Attack against Deep Neural Networks via Flipping Limited Weight Bits","arxiv_id":"2102.10496","date":"2021-02-21","proceeding":"ICLR 2021 1","authors":["Jiawang Bai","Baoyuan Wu","Yong Zhang","Yiming Li","Zhifeng Li","Shu-Tao Xia"],"abstract":"To explore the vulnerability of deep neural networks (DNNs), many attack paradigms have been well studied, such as the poisoning-based backdoor attack in the training stage and the adversarial attack in the inference stage. In this paper, we study a novel attack paradigm, which modifies model parameters in the deployment stage for malicious purposes. Specifically, our goal is to misclassify a specific sample into a target class without any sample modification, while not significantly reduce the prediction accuracy of other samples to ensure the stealthiness. To this end, we formulate this problem as a binary integer programming (BIP), since the parameters are stored as binary bits ($i.e.$, 0 and 1) in the memory. By utilizing the latest technique in integer programming, we equivalently reformulate this BIP problem as a continuous optimization problem, which can be effectively and efficiently solved using the alternating direction method of multipliers (ADMM) method. Consequently, the flipped critical bits can be easily determined through optimization, rather than using a heuristic strategy. Extensive experiments demonstrate the superiority of our method in attacking DNNs.","url_abs":"https://arxiv.org/abs/2102.10496v1","url_pdf":"https://arxiv.org/pdf/2102.10496v1.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"targeted-attack-against-deep-neural-networks-1","repo_url":"https://github.com/jiawangbai/TA-LBF","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":0,"framework":"pytorch","reach":null},{"paper_slug":"targeted-attack-against-deep-neural-networks-1","repo_url":"https://github.com/igitugraz/outputcodematching","is_official":0,"mentioned_in_paper":0,"mentioned_in_github":1,"framework":"pytorch","reach":{"status":"ok","spdx":"MIT"}}],"tasks":[{"task_slug":"adversarial-attack","task_name":"Adversarial Attack"},{"task_slug":"backdoor-attack","task_name":"Backdoor Attack"}],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"atlas_url":"https://app.syntology.ai/?focus=2102.10496","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2102.10496"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"deterministic:regex_extraction","url":"https://github.com/jiawangbai/TA-LBF","reach":null},{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/igitugraz/outputcodematching","reach":{"status":"ok","spdx":"MIT"}}],"summary":{"ran_honours":2,"ran_fixture":1},"by_repo_kind":{"official":{"samples":3,"ran":3,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":3,"samples":[{"code_sha256_prefix":"bdf2f58dce9ed6ee","entry":"project_box","repo":"jiawangbai/TA-LBF","repo_kind":"official","path":"attack_one.py","file_url":"https://github.com/jiawangbai/TA-LBF/blob/HEAD/attack_one.py","link_basis":"first_harvest_node","language":"python","status":"ran_honours","verification_level":1,"contract_check":"HONOURS","metamorphic_tier":"invariant","behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"bdf2f58dce9ed6ee"}},{"code_sha256_prefix":"494eaeaa9643571a","entry":"project_positive","repo":"jiawangbai/TA-LBF","repo_kind":"official","path":"attack_one.py","file_url":"https://github.com/jiawangbai/TA-LBF/blob/HEAD/attack_one.py","link_basis":"first_harvest_node","language":"python","status":"ran_honours","verification_level":1,"contract_check":"HONOURS","metamorphic_tier":"invariant","behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"494eaeaa9643571a"}},{"code_sha256_prefix":"fae6c9336a515453","entry":"project_shifted_Lp_ball","repo":"jiawangbai/TA-LBF","repo_kind":"official","path":"attack_one.py","file_url":"https://github.com/jiawangbai/TA-LBF/blob/HEAD/attack_one.py","link_basis":"first_harvest_node","language":"python","status":"ran_fixture","verification_level":1,"contract_check":"RAISES","metamorphic_tier":"invariant","behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"fae6c9336a515453"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}