{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T23:14:28Z","timestamp":1778109268001,"version":"3.51.4"},"publisher-location":"Cham","reference-count":21,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032160911","type":"print"},{"value":"9783032160928","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-16092-8_21","type":"book-chapter","created":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T22:48:19Z","timestamp":1778107699000},"page":"377-396","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Backdoor Attacks on\u00a0Transformers for\u00a0Tabular Data: An Empirical Study"],"prefix":"10.1007","author":[{"given":"Bart","family":"Pleiter","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-0636-3385","authenticated-orcid":false,"given":"Behrad","family":"Tajalli","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6543-4801","authenticated-orcid":false,"given":"Stefanos","family":"Koffas","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6735-3623","authenticated-orcid":false,"given":"Gorka","family":"Abad","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9900-4081","authenticated-orcid":false,"given":"Jing","family":"Xu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1430-4721","authenticated-orcid":false,"given":"Martha","family":"Larson","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7509-4337","authenticated-orcid":false,"given":"Stjepan","family":"Picek","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2026,5,1]]},"reference":[{"key":"21_CR1","unstructured":"Abad, G., Xu, J., Koffas, S., Tajalli, B., Picek, S.: A systematic evaluation of backdoor trigger characteristics in image classification. arXiv preprint arXiv:2302.01740 (2023)"},{"key":"21_CR2","doi-asserted-by":"crossref","unstructured":"Arik, S.\u00d6., Pfister, T.: Tabnet: attentive interpretable tabular learning. In: Proceedings of the AAAI Conference on Artificial Intelligence, vol.\u00a035 (2021)","DOI":"10.1609\/aaai.v35i8.16826"},{"key":"21_CR3","unstructured":"Ballet, V., Renard, X., Aigrain, J., Laugel, T., Frossard, P., Detyniecki, M.: Imperceptible adversarial attacks on tabular data. arXiv preprint arXiv:1911.03274 (2019)"},{"key":"21_CR4","unstructured":"Borisov, V., Leemann, T., Se\u00dfler, K., Haug, J., Pawelczyk, M., Kasneci, G.: Deep neural networks and tabular data: A survey. IEEE Trans. Neural Netw. Learn. Syst. (2022)"},{"key":"21_CR5","doi-asserted-by":"crossref","unstructured":"Chen, T., Guestrin, C.: XGBoost: a scalable tree boosting system. In: Proceedings of the 22nd ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, pp. 785\u2013794 (2016)","DOI":"10.1145\/2939672.2939785"},{"key":"21_CR6","first-page":"18932","volume":"34","author":"Y Gorishniy","year":"2021","unstructured":"Gorishniy, Y., Rubachev, I., Khrulkov, V., Babenko, A.: Revisiting deep learning models for tabular data. Adv. Neural. Inf. Process. Syst. 34, 18932\u201318943 (2021)","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"21_CR7","unstructured":"Gressel, G., et\u00a0al.: Feature importance guided attack: a model agnostic adversarial attack. arXiv preprint arXiv:2106.14815 (2021)"},{"key":"21_CR8","doi-asserted-by":"crossref","unstructured":"Guo, H., Tang, R., Ye, Y., Li, Z., He, X.: Deepfm: a factorization-machine based neural network for ctr prediction. arXiv preprint arXiv:1703.04247 (2017)","DOI":"10.24963\/ijcai.2017\/239"},{"key":"21_CR9","unstructured":"Hayase, J., Kong, W., Somani, R., Oh, S.: Spectre: defending against backdoor attacks using robust statistics. In: International Conference on Machine Learning, pp. 4129\u20134139. PMLR (2021)"},{"issue":"8","key":"21_CR10","doi-asserted-by":"publisher","DOI":"10.2196\/38440","volume":"10","author":"B Joe","year":"2022","unstructured":"Joe, B., Park, Y., Hamm, J., Shin, I., Lee, J., et al.: Exploiting missing value patterns for a backdoor attack on machine learning models of electronic health records: development and validation study. JMIR Med. Inform. 10(8), e38440 (2022)","journal-title":"JMIR Med. Inform."},{"key":"21_CR11","doi-asserted-by":"crossref","unstructured":"Lagunas, F., Charlaix, E., Sanh, V., Rush, A.M.: Block pruning for faster transformers. arXiv preprint arXiv:2109.04838 (2021)","DOI":"10.18653\/v1\/2021.emnlp-main.829"},{"key":"21_CR12","unstructured":"Li, Y., Jiang, Y., Li, Z., Xia, S.T.: Backdoor learning: a survey. IEEE Trans. Neural Netw. Learn. Syst. (2022)"},{"key":"21_CR13","doi-asserted-by":"crossref","unstructured":"Liu, K., Dolan-Gavitt, B., Garg, S.: Fine-pruning: defending against backdooring attacks on deep neural networks. In: Research in Attacks, Intrusions, and Defenses (RAID), pp. 273\u2013294. Springer, Cham (2018)","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"21_CR14","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2022.108377","volume":"242","author":"Y Mathov","year":"2022","unstructured":"Mathov, Y., Levy, E., Katzir, Z., Shabtai, A., Elovici, Y.: Not all datasets are born equal: on heterogeneous tabular data and adversarial examples. Knowl.-Based Syst. 242, 108377 (2022)","journal-title":"Knowl.-Based Syst."},{"key":"21_CR15","doi-asserted-by":"crossref","unstructured":"Shwartz-Ziv, R., Armon, A.: Tabular data: deep learning is not all you need (2021)","DOI":"10.1016\/j.inffus.2021.11.011"},{"key":"21_CR16","unstructured":"Tang, D., Wang, X., Tang, H., Zhang, K.: Demon in the variant: statistical analysis of DNNs for robust backdoor contamination detection. In: 30th USENIX Security Symposium (USENIX Security 2021), pp. 1541\u20131558. USENIX Association (2021)"},{"key":"21_CR17","unstructured":"Tran, B., Li, J., Madry, A.: Spectral signatures in backdoor attacks. In: Advances in Neural Information Processing Systems, vol. 31 (2018)"},{"key":"21_CR18","doi-asserted-by":"crossref","unstructured":"Wang, B., et al.: Neural cleanse: identifying and mitigating backdoor attacks in neural networks. In: 2019 IEEE Symposium on Security and Privacy (SP). IEEE (2019)","DOI":"10.1109\/SP.2019.00031"},{"key":"21_CR19","unstructured":"Xiang, Z., Miller, D.J., Kesidis, G.: Post-training detection of backdoor attacks for two-class and multi-attack scenarios. arXiv preprint arXiv:2201.08474 (2022)"},{"key":"21_CR20","unstructured":"Xie, C., Huang, K., Chen, P.Y., Li, B.: DBA: distributed backdoor attacks against federated learning. In: International Conference on Learning Representations (2020)"},{"key":"21_CR21","unstructured":"Yang, J., Li, X., Wu, H.: DeepTables: A Deep Learning Package for Tabular Data (2022). https:\/\/github.com\/DataCanvasIO\/DeepTables, version 0.2.x"}],"container-title":["Lecture Notes in Computer Science","Computer Security. ESORICS 2025 International Workshops"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-16092-8_21","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T22:48:22Z","timestamp":1778107702000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-16092-8_21"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032160911","9783032160928"],"references-count":21,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-16092-8_21","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"1 May 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Toulouse","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"France","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22 September 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 September 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.esorics2025.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}