Dynamic Black-box Backdoor Attacks on IoT Sensory Data

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Chathoth, Ajesh Koyatan, Lee, Stephen
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866914162858262528
author Chathoth, Ajesh Koyatan
Lee, Stephen
author_facet Chathoth, Ajesh Koyatan
Lee, Stephen
contents Sensor data-based recognition systems are widely used in various applications, such as gait-based authentication and human activity recognition (HAR). Modern wearable and smart devices feature various built-in Inertial Measurement Unit (IMU) sensors, and such sensor-based measurements can be fed to a machine learning-based model to train and classify human activities. While deep learning-based models have proven successful in classifying human activity and gestures, they pose various security risks. In our paper, we discuss a novel dynamic trigger-generation technique for performing black-box adversarial attacks on sensor data-based IoT systems. Our empirical analysis shows that the attack is successful on various datasets and classifier models with minimal perturbation on the input data. We also provide a detailed comparative analysis of performance and stealthiness to various other poisoning techniques found in backdoor attacks. We also discuss some adversarial defense mechanisms and their impact on the effectiveness of our trigger-generation technique.
format Preprint
id arxiv_https___arxiv_org_abs_2511_14074
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Dynamic Black-box Backdoor Attacks on IoT Sensory Data
Chathoth, Ajesh Koyatan
Lee, Stephen
Cryptography and Security
Machine Learning
Sensor data-based recognition systems are widely used in various applications, such as gait-based authentication and human activity recognition (HAR). Modern wearable and smart devices feature various built-in Inertial Measurement Unit (IMU) sensors, and such sensor-based measurements can be fed to a machine learning-based model to train and classify human activities. While deep learning-based models have proven successful in classifying human activity and gestures, they pose various security risks. In our paper, we discuss a novel dynamic trigger-generation technique for performing black-box adversarial attacks on sensor data-based IoT systems. Our empirical analysis shows that the attack is successful on various datasets and classifier models with minimal perturbation on the input data. We also provide a detailed comparative analysis of performance and stealthiness to various other poisoning techniques found in backdoor attacks. We also discuss some adversarial defense mechanisms and their impact on the effectiveness of our trigger-generation technique.
title Dynamic Black-box Backdoor Attacks on IoT Sensory Data
topic Cryptography and Security
Machine Learning
url https://arxiv.org/abs/2511.14074