{"id":"W4406014826","doi":"10.1109/iccd63220.2024.00025","title":"A Semi Black-Box Adversarial Bit- Flip Attack with Limited DNN Model Information","year":2024,"lang":"en","type":"article","venue":"","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":1,"is_retracted":false,"has_abstract":true,"ca_institutions":"Simon Fraser University; University of British Columbia","funders":"Natural Sciences and Engineering Research Council of Canada","keywords":"Black box; Computer science; Adversarial system; Bit (key); Computer security; Artificial intelligence","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0003319058,0.0002395993,0.0001871316,0.0003012415,0.000140223,0.0006554114,0.0007596497,0.0001234266,0.00005201487],"category_scores_gemma":[0.00009989783,0.0001858253,0.00007537491,0.0009304213,0.00007119755,0.004091106,0.0003939181,0.0004377391,0.0005169882],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001333181,"about_ca_system_score_gemma":0.0002948157,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0000453505,"about_ca_topic_score_gemma":0.00001289303,"domain_scores_codex":[0.9983303,0.00005515857,0.0003167877,0.0003854579,0.0005395514,0.0003727544],"domain_scores_gemma":[0.9989796,0.0001571587,0.00007885745,0.0005477231,0.0001173247,0.0001193476],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00003009296,0.0000126111,0.00005029227,0.00003836479,0.00004044484,0.00001646342,0.002452492,0.9238275,0.00003830798,0.05743481,0.005518332,0.01054029],"study_design_scores_gemma":[0.0004681643,0.00007703547,0.0000371709,0.00006383198,0.00001827459,0.00001781363,0.00007869939,0.9871214,0.0001192168,0.0005338363,0.01118339,0.0002811413],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.006463558,0.00001691569,0.9668444,0.001896895,0.0005508576,0.0002211369,0.000002766488,0.001216878,0.02278659],"genre_scores_gemma":[0.795922,0.000007242431,0.2008221,0.0008235502,0.0002384781,0.000015452,0.00002357302,0.00002440743,0.00212321],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.7894585,"threshold_uncertainty_score":0.7577736,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01393975134555772,"score_gpt":0.2522502418062494,"score_spread":0.2383104904606917,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}