{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T13:08:37Z","timestamp":1777900117280,"version":"3.51.4"},"publisher-location":"Cham","reference-count":30,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032060952","type":"print"},{"value":"9783032060969","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,9,27]],"date-time":"2025-09-27T00:00:00Z","timestamp":1758931200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,9,27]],"date-time":"2025-09-27T00:00:00Z","timestamp":1758931200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-06096-9_13","type":"book-chapter","created":{"date-parts":[[2025,9,26]],"date-time":"2025-09-26T09:54:22Z","timestamp":1758880462000},"page":"221-239","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Variance-Based Defense Against Blended Backdoor Attacks"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8406-7795","authenticated-orcid":false,"given":"Sujeevan","family":"Aseervatham","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-1852-5927","authenticated-orcid":false,"given":"Achraf","family":"Kerzazi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3667-3357","authenticated-orcid":false,"given":"Youn\u00e8s","family":"Bennani","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,9,27]]},"reference":[{"key":"13_CR1","unstructured":"Chen, B., et al.: Detecting backdoor attacks on deep neural networks by activation clustering. In: SafeAI@AAAI. CEUR Workshop Proceedings (2019)"},{"key":"13_CR2","unstructured":"Chen, X., Liu, C., Li, B., Lu, K., Song, D.: Targeted backdoor attacks on deep learning systems using data poisoning (2017). arXiv preprint arXiv:1712.05526"},{"key":"13_CR3","unstructured":"Chen, X., Liu, C., Li, B., Lu, K., Song, D.: Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning (2017). arXiv preprint arxiv:1712.05526"},{"key":"13_CR4","doi-asserted-by":"crossref","unstructured":"Chou, E., Tramer, F., Pellegrino, G.: Sentinet: Detecting localized universal attacks against deep learning systems. In: IEEE SPW (2020)","DOI":"10.1109\/SPW50608.2020.00025"},{"key":"13_CR5","unstructured":"Dodge, Y.: Kolmogorov\u2013smirnov test. In: The Concise Encyclopedia of Statistics. Springer New York (2008)"},{"key":"13_CR6","doi-asserted-by":"crossref","unstructured":"Gao, Y., Xu, C., Wang, D., Chen, S., Ranasinghe, D.C., Nepal, S.: Strip: a defence against trojan attacks on deep neural networks. In: ACSAC (2019)","DOI":"10.1145\/3359789.3359790"},{"key":"13_CR7","unstructured":"Gu, T., Dolan-Gavitt, B., Garg, S.: BadNets: Identifying vulnerabilities in the machine learning model supply chain (2017). arXiv preprint arxiv:1708.06733"},{"key":"13_CR8","unstructured":"Guo, J., Li, Y., Chen, X., Guo, H., Sun, L., Liu, C.: SCALE-UP: An efficient black-box input-level backdoor detection via analyzing scaled prediction consistency. In: ICLR (2023)"},{"key":"13_CR9","doi-asserted-by":"crossref","unstructured":"He, K., Zhang, X., Ren, S., Sun, J.: Identity mappings in deep residual networks. In: ECCV (2016)","DOI":"10.1007\/978-3-319-46493-0_38"},{"key":"13_CR10","unstructured":"Huang, K., Li, Y., Wu, B., Qin, Z., Ren, K.: Backdoor defense via decoupling the training process. In: ICLR (2022)"},{"key":"13_CR11","unstructured":"Krizhevsky, A., Hinton, G.: Learning multiple layers of features from tiny images. Master\u2019s thesis, Department of Computer Science, University of Toronto (2009)"},{"key":"13_CR12","unstructured":"Le, Y., Yang, X.: Tiny imagenet visual recognition challenge. CS 231N (2015)"},{"key":"13_CR13","unstructured":"Lee, D.H.: Pseudo-label : The simple and efficient semi-supervised learning method for deep neural networks. In: WREPL@ICML (2013)"},{"key":"13_CR14","first-page":"14900","volume":"34","author":"Y Li","year":"2021","unstructured":"Li, Y., Lyu, X., Koren, N., Lyu, L., Li, B., Ma, X.: Anti-backdoor learning: training clean models on poisoned data. NeurIPS 34, 14900\u201314912 (2021)","journal-title":"NeurIPS"},{"key":"13_CR15","unstructured":"Li, Y., et al.: Reconstructive neuron pruning for backdoor defense. In: ICML (2023)"},{"key":"13_CR16","doi-asserted-by":"crossref","unstructured":"Liu, Q., Li, P., Zhao, W., Cai, W., Yu, S., Leung, V.C.M.: A survey on security threats and defensive techniques of machine learning: a data driven view. IEEE Access (2018)","DOI":"10.1109\/ACCESS.2018.2805680"},{"key":"13_CR17","doi-asserted-by":"crossref","unstructured":"Ma, W., Wang, D., Sun, R., Xue, M., Wen, S., Xiang, Y.: The \u201cbeatrix\u201d resurrections: Robust backdoor detection via gram matrices. In: NDSS (2023)","DOI":"10.14722\/ndss.2023.23069"},{"key":"13_CR18","unstructured":"Nguyen, A., Tran, A.: Wanet\u2013imperceptible warping-based backdoor attack (2021). arXiv preprint arXiv:2102.10369"},{"key":"13_CR19","unstructured":"Nguyen, T.A., Tran, A.: Input-aware dynamic backdoor attack. NeurIPS (2020)"},{"key":"13_CR20","doi-asserted-by":"publisher","DOI":"10.1109\/TSMC.1979.4310076","volume-title":"A Threshold Selection Method from Gray-Level Histograms","author":"N Otsu","year":"1979","unstructured":"Otsu, N.: A Threshold Selection Method from Gray-Level Histograms. Man, and Cybernetics, IEEE Transactions on Systems (1979)"},{"key":"13_CR21","doi-asserted-by":"crossref","unstructured":"Pitropakis, N., Panaousis, E., Giannetsos, T., Anastasiadis, E., Loukas, G.: A taxonomy and survey of attacks against machine learning. Comput. Sci. Rev. 34 (2019)","DOI":"10.1016\/j.cosrev.2019.100199"},{"key":"13_CR22","unstructured":"Qi, X., Xie, T., Li, Y., Mahloujifar, S., Mittal, P.: Revisiting the assumption of latent separability for backdoor defenses. In: ICLR (2023)"},{"key":"13_CR23","doi-asserted-by":"crossref","unstructured":"Salem, A., Wen, R., Backes, M., Ma, S., Zhang, Y.: Dynamic backdoor attacks against machine learning models. In: EuroS and P (2022)","DOI":"10.1109\/EuroSP53844.2022.00049"},{"key":"13_CR24","doi-asserted-by":"crossref","unstructured":"Selvaraju, R.R., Cogswell, M., Das, A., Vedantam, R., Parikh, D., Batra, D.: Grad-cam: visual explanations from deep networks via gradient-based localization. IJCV (2020)","DOI":"10.1007\/s11263-019-01228-7"},{"key":"13_CR25","unstructured":"Tang, D., Wang, X., Tang, H., Zhang, K.: Demon in the variant: Statistical analysis of $$\\{$$DNNs$$\\}$$ for robust backdoor contamination detection. In: USENIX Security Symposium (2021)"},{"key":"13_CR26","unstructured":"Wu, B., et al.: Backdoorbench: a comprehensive benchmark of backdoor learning. In: NeurIPS (2022)"},{"key":"13_CR27","unstructured":"Wu, D., Wang, Y.: Adversarial neuron pruning purifies backdoored deep models. In: NeurIPS (2021)"},{"key":"13_CR28","unstructured":"Yuan, D., Wei, S., Zhang, M., Liu, L., Wu, B.: Activation gradient based poisoned sample detection against backdoor attacks (2024). arXiv preprint arxiv:2312.06230"},{"key":"13_CR29","doi-asserted-by":"crossref","unstructured":"Zeng, Y., Park, W., Mao, Z.M., Jia, R.: Rethinking the backdoor attacks\u2019 triggers: a frequency perspective. In: IEEE ICCV (2021)","DOI":"10.1109\/ICCV48922.2021.01616"},{"key":"13_CR30","unstructured":"Zhang, M., Zhu, M., Zhu, Z., Wu, B.: Reliable poisoned sample detection against backdoor attacks enhanced by sharpness aware minimization (2024). arXiv preprint arXiv:2411.11525"}],"container-title":["Lecture Notes in Computer Science","Machine Learning and Knowledge Discovery in Databases. Research Track"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-06096-9_13","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T10:23:54Z","timestamp":1777631034000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-06096-9_13"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,27]]},"ISBN":["9783032060952","9783032060969"],"references-count":30,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-06096-9_13","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,9,27]]},"assertion":[{"value":"27 September 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ECML PKDD","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Joint European Conference on Machine Learning and Knowledge Discovery in Databases","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Porto","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Portugal","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"15 September 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"19 September 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"ecml2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/ecmlpkdd.org\/2025\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}