{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,21]],"date-time":"2025-02-21T01:54:50Z","timestamp":1740102890544,"version":"3.37.3"},"publisher-location":"New York, NY, USA","reference-count":16,"publisher":"ACM","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,5,30]]},"DOI":"10.1145\/3649403.3656485","type":"proceedings-article","created":{"date-parts":[[2024,5,15]],"date-time":"2024-05-15T16:04:12Z","timestamp":1715789052000},"page":"14-19","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Beyond PhantomSponges: Enhancing Sponge Attack on Object Detection Models"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-7045-0620","authenticated-orcid":false,"given":"Coen","family":"Schoof","sequence":"first","affiliation":[{"name":"Radboud University, Nijmegen, Netherlands"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6543-4801","authenticated-orcid":false,"given":"Stefanos","family":"Koffas","sequence":"additional","affiliation":[{"name":"Delft University of Technology, Delft, Netherlands"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3612-1934","authenticated-orcid":false,"given":"Mauro","family":"Conti","sequence":"additional","affiliation":[{"name":"University of Padua, Padua, Italy"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7509-4337","authenticated-orcid":false,"given":"Stjepan","family":"Picek","sequence":"additional","affiliation":[{"name":"Radboud University & Delft University of Technology, Nijmegen, Netherlands"}]}],"member":"320","published-online":{"date-parts":[[2024,5,27]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Antonio Emanuele Cin\u00e0 Ambra Demontis Battista Biggio Fabio Roli and Marcello Pelillo. 2023. Energy-Latency Attacks via Sponge Poisoning. arxiv: 2203.08147 [cs.CR]"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.685"},{"key":"e_1_3_2_1_5_1","volume-title":"Universal Physical Camouflage Attacks on Object Detectors. 2020 IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR) (2019","author":"Huang Lifeng","year":"2019","unstructured":"Lifeng Huang, Chengying Gao, Yuyin Zhou, Cihang Xie, Alan Loddon Yuille, Changqing Zou, and Ning Liu. 2019. Universal Physical Camouflage Attacks on Object Detectors. 2020 IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR) (2019), 717--726. https:\/\/api.semanticscholar.org\/CorpusID:219099302"},{"key":"e_1_3_2_1_6_1","volume-title":"Failure modes in machine learning systems. arXiv preprint arXiv:1911.11034","author":"Siva Kumar Ram Shankar","year":"2019","unstructured":"Ram Shankar Siva Kumar, David O Brien, Kendra Albert, Salom\u00e9 Vilj\u00f6en, and Jeffrey Snover. 2019. Failure modes in machine learning systems. arXiv preprint arXiv:1911.11034 (2019)."},{"key":"e_1_3_2_1_7_1","volume-title":"The SpongeNet Attack: Sponge Weight Poisoning of Deep Neural Networks. arXiv preprint arXiv:2402.06357","author":"Lintelo Jona","year":"2024","unstructured":"Jona te Lintelo, Stefanos Koffas, and Stjepan Picek. 2024. The SpongeNet Attack: Sponge Weight Poisoning of Deep Neural Networks. arXiv preprint arXiv:2402.06357 (2024)."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3572864.3581586"},{"volume-title":"Real-Time Object Detection. In 2016 IEEE Conference on Computer Vision and Pattern Recognition (CVPR). 779--788","author":"Redmon J.","key":"e_1_3_2_1_9_1","unstructured":"J. Redmon, S. Divvala, R. Girshick, and A. Farhadi. 2016. You Only Look Once: Unified, Real-Time Object Detection. In 2016 IEEE Conference on Computer Vision and Pattern Recognition (CVPR). 779--788."},{"key":"e_1_3_2_1_10_1","volume-title":"Phantom Sponges: Exploiting Non-Maximum Suppression to Attack Deep Object Detectors. arxiv: 2205.13618 [cs.CV]","author":"Shapira Avishag","year":"2022","unstructured":"Avishag Shapira, Alon Zolfi, Luca Demetrio, Battista Biggio, and Asaf Shabtai. 2022. Phantom Sponges: Exploiting Non-Maximum Suppression to Attack Deep Object Detectors. arxiv: 2205.13618 [cs.CV]"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP51992.2021.00024"},{"key":"e_1_3_2_1_12_1","volume-title":"Intriguing properties of neural networks. arXiv preprint arXiv:1312.6199","author":"Szegedy Christian","year":"2013","unstructured":"Christian Szegedy, Wojciech Zaremba, Ilya Sutskever, Joan Bruna, Dumitru Erhan, Ian Goodfellow, and Rob Fergus. 2013. Intriguing properties of neural networks. arXiv preprint arXiv:1312.6199 (2013)."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2019.00012"},{"volume-title":"YOLOv5: A state-of-the-art real-time object detection system. https:\/\/docs.ultralytics.com","year":"2024","key":"e_1_3_2_1_14_1","unstructured":"Ultralytics. 2021. YOLOv5: A state-of-the-art real-time object detection system. https:\/\/docs.ultralytics.com. Accessed: April 2024."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58548-8_1"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00271"}],"event":{"name":"WiSec '24: 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control","SIGMOBILE ACM Special Interest Group on Mobility of Systems, Users, Data and Computing"],"location":"Seoul Republic of Korea","acronym":"WiSec '24"},"container-title":["Proceedings of the 2024 ACM Workshop on Wireless Security and Machine Learning"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3649403.3656485","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,6,30]],"date-time":"2024-06-30T10:18:30Z","timestamp":1719742710000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3649403.3656485"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,5,27]]},"references-count":16,"alternative-id":["10.1145\/3649403.3656485","10.1145\/3649403"],"URL":"https:\/\/doi.org\/10.1145\/3649403.3656485","relation":{},"subject":[],"published":{"date-parts":[[2024,5,27]]},"assertion":[{"value":"2024-05-27","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}