{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,31]],"date-time":"2026-01-31T10:35:57Z","timestamp":1769855757983,"version":"3.49.0"},"reference-count":36,"publisher":"Springer Science and Business Media LLC","issue":"9","license":[{"start":{"date-parts":[[2024,4,5]],"date-time":"2024-04-05T00:00:00Z","timestamp":1712275200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,4,5]],"date-time":"2024-04-05T00:00:00Z","timestamp":1712275200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"name":"National Natural Science Foundation of China for Joint Fund Project","award":["No.U1936218"],"award-info":[{"award-number":["No.U1936218"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["No.62102107"],"award-info":[{"award-number":["No.62102107"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["No.62002074"],"award-info":[{"award-number":["No.62002074"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["No.62132018"],"award-info":[{"award-number":["No.62132018"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Wireless Netw"],"published-print":{"date-parts":[[2024,12]]},"DOI":"10.1007\/s11276-024-03724-2","type":"journal-article","created":{"date-parts":[[2024,4,5]],"date-time":"2024-04-05T08:01:54Z","timestamp":1712304114000},"page":"7569-7579","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Bag of tricks for backdoor learning"],"prefix":"10.1007","volume":"30","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3734-7350","authenticated-orcid":false,"given":"Ruitao","family":"Hou","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Anli","family":"Yan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hongyang","family":"Yan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Teng","family":"Huang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,4,5]]},"reference":[{"issue":"7553","key":"3724_CR1","doi-asserted-by":"publisher","first-page":"436","DOI":"10.1038\/nature14539","volume":"521","author":"Y LeCun","year":"2015","unstructured":"LeCun, Y., Bengio, Y., & Hinton, G. (2015). Deep learning. Nature, 521(7553), 436\u2013444.","journal-title":"Nature"},{"key":"3724_CR2","unstructured":"Jyoti, A., Ganesh, K.B., Gayala, M., Tunuguntla, N.L., Kamath, S., & Balasubramanian, V.N. (2022). On the robustness of explanations of deep neural network models: A survey. arXiv:2211.04780."},{"issue":"4","key":"3724_CR3","doi-asserted-by":"publisher","first-page":"1071","DOI":"10.1007\/s11831-019-09344-w","volume":"27","author":"S Dargan","year":"2020","unstructured":"Dargan, S., Kumar, M., Ayyagari, M. R., & Kumar, G. (2020). A survey of deep learning and its applications: A new paradigm to machine learning. Archives of Computational Methods in Engineering, 27(4), 1071\u20131092.","journal-title":"Archives of Computational Methods in Engineering"},{"key":"3724_CR4","doi-asserted-by":"publisher","first-page":"186","DOI":"10.1016\/j.jmsy.2019.12.005","volume":"54","author":"F Ning","year":"2020","unstructured":"Ning, F., Shi, Y., Cai, M., Xu, W., & Zhang, X. (2020). Manufacturing cost estimation based on a deep-learning method. Journal of Manufacturing Systems, 54, 186\u2013195.","journal-title":"Journal of Manufacturing Systems"},{"key":"3724_CR5","doi-asserted-by":"crossref","unstructured":"Ribeiro, M., Grolinger, K., & Capretz, M.A. (2015). Mlaas: Machine learning as a service. In 2015 IEEE 14th international conference on machine learning and applications (ICMLA). IEEE, pp. 896\u2013902.","DOI":"10.1109\/ICMLA.2015.152"},{"key":"3724_CR6","unstructured":"IMARC: Machine Learning as a Service (MLaaS) Market: Global Industry Trends, Share, Size, Growth, Opportunity and Forecast 2022-2027. https:\/\/www.imarcgroup.com\/machine-learning-as-a-service-market."},{"key":"3724_CR7","unstructured":"Gu, T., Dolan-Gavitt, B., & Garg, S. (2017). Badnets: Identifying vulnerabilities in the machine learning model supply chain. arXiv:1708.06733."},{"key":"3724_CR8","unstructured":"Li, Y., Wu, B., Jiang, Y., Li, Z., & Xia, S.-T. (2020). Backdoor learning: A survey. arXiv:2007.08745."},{"key":"3724_CR9","doi-asserted-by":"publisher","unstructured":"Liu, Y., Ma, S., Aafer, Y., Lee, W.-C., Zhai, J., Wang, W., & Zhang, X. (2018). Trojaning attack on neural networks. In Network and distributed system security symposium. https:\/\/doi.org\/10.14722\/ndss.2018.23291.","DOI":"10.14722\/ndss.2018.23291"},{"key":"3724_CR10","unstructured":"Bagdasaryan, E., Veit, A., Hua, Y., Estrin, D., & Shmatikov, V. (2020). How to backdoor federated learning. In International conference on artificial intelligence and statistics. PMLR, pp. 2938\u20132948."},{"key":"3724_CR11","unstructured":"Chen, X., Liu, C., Li, B., Lu, K., & Song, D. (2017). Targeted backdoor attacks on deep learning systems using data poisoning. arXiv:1712.05526."},{"key":"3724_CR12","unstructured":"Turner, A., Tsipras, D., & Madry, A. (2018). Clean-label backdoor attacks."},{"key":"3724_CR13","doi-asserted-by":"crossref","unstructured":"Saha, A., Subramanya, A., & Pirsiavash, H. (2020). Hidden trigger backdoor attacks. In Proceedings of the AAAI conference on artificial intelligence, vol. 34, pp. 11957\u201311965.","DOI":"10.1609\/aaai.v34i07.6871"},{"key":"3724_CR14","doi-asserted-by":"crossref","unstructured":"Quiring, E., & Rieck, K. (2020). Backdooring and poisoning neural networks with image-scaling attacks. In 2020 IEEE security and privacy workshops (SPW). IEEE, pp. 41\u201347.","DOI":"10.1109\/SPW50608.2020.00024"},{"key":"3724_CR15","doi-asserted-by":"crossref","unstructured":"Li, Y., Li, Y., Wu, B., Li, L., He, R., & Lyu, S. (2021). Invisible backdoor attack with sample-specific triggers. In Proceedings of the IEEE\/CVF international conference on computer vision, pp. 16463\u201316472.","DOI":"10.1109\/ICCV48922.2021.01615"},{"key":"3724_CR16","doi-asserted-by":"crossref","unstructured":"Liu, Y., Xie, Y., & Srivastava, A. (2017). Neural trojans. In 2017 IEEE international conference on computer design (ICCD). IEEE, pp. 45\u201348.","DOI":"10.1109\/ICCD.2017.16"},{"key":"3724_CR17","doi-asserted-by":"crossref","unstructured":"Doan, B.G., Abbasnejad, E., & Ranasinghe, D.C. (2020). Februus: Input purification defense against trojan attacks on deep neural network systems. In Annual computer security applications conference, pp. 897\u2013912.","DOI":"10.1145\/3427228.3427264"},{"key":"3724_CR18","unstructured":"Udeshi, S., Peng, S., Woo, G., Loh, L., Rawshan, L., & Chattopadhyay, S. (2019). Model agnostic defence against backdoor attacks in machine learning. arXiv:1908.02203."},{"key":"3724_CR19","unstructured":"Li, Y., Zhai, T., Wu, B., Jiang, Y., Li, Z., & Xia, S. (2020). Rethinking the trigger of backdoor attack. arXiv:2004.04692."},{"key":"3724_CR20","doi-asserted-by":"crossref","unstructured":"Wang, B., Yao, Y., Shan, S., Li, H., Viswanath, B., Zheng, H., & Zhao, B.Y. (2019). Neural cleanse: Identifying and mitigating backdoor attacks in neural networks. In 2019 IEEE symposium on security and privacy (SP). IEEE, pp. 707\u2013723.","DOI":"10.1109\/SP.2019.00031"},{"key":"3724_CR21","doi-asserted-by":"crossref","unstructured":"Kolouri, S., Saha, A., Pirsiavash, H., & Hoffmann, H. (2020) Universal litmus patterns: Revealing backdoor attacks in CNNs. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition, pp. 301\u2013310.","DOI":"10.1109\/CVPR42600.2020.00038"},{"key":"3724_CR22","unstructured":"Huang, X., Alzantot, M., & Srivastava, M. (2019). Neuroninspect: Detecting backdoors in neural networks via output explanations. arXiv:1911.07399."},{"key":"3724_CR23","doi-asserted-by":"crossref","unstructured":"Gao, Y., Xu, C., Wang, D., Chen, S., Ranasinghe, D.C., & Nepal, S. (2019). Strip: A defence against trojan attacks on deep neural networks. In Proceedings of the 35th annual computer security applications conference, pp. 113\u2013125.","DOI":"10.1145\/3359789.3359790"},{"key":"3724_CR24","doi-asserted-by":"crossref","unstructured":"Liu, K., Dolan-Gavitt, B., & Garg, S. (2018). Fine-pruning: Defending against backdooring attacks on deep neural networks. In International symposium on research in attacks, intrusions, and defenses, pp. 273\u2013294. Springer.","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"3724_CR25","unstructured":"Krizhevsky, A., & Hinton, G. (2009). Learning multiple layers of features from tiny images. Technical report, University of Toronto."},{"key":"3724_CR26","unstructured":"Loshchilov, I., & Hutter, F. (2016). Sgdr: Stochastic gradient descent with warm restarts. arXiv:1608.03983."},{"key":"3724_CR27","unstructured":"Smith, S.L., Kindermans, P.-J., Ying, C., & Le, Q.V. (2017). Don\u2019t decay the learning rate, increase the batch size. arXiv:1711.00489."},{"issue":"1","key":"3724_CR28","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1186\/s40537-019-0197-0","volume":"6","author":"C Shorten","year":"2019","unstructured":"Shorten, C., & Khoshgoftaar, T. M. (2019). A survey on image data augmentation for deep learning. Journal of Big Data, 6(1), 1\u201348.","journal-title":"Journal of Big Data"},{"key":"3724_CR29","doi-asserted-by":"crossref","unstructured":"Zhang, H., Cisse, M., Dauphin, Y.N., & Lopez-Paz, D. (2017). mixup: Beyond empirical risk minimization. arXiv:1710.09412","DOI":"10.1007\/978-1-4899-7687-1_79"},{"key":"3724_CR30","unstructured":"M\u00fcller, R., Kornblith, S., & Hinton, G.E. (2019). When does label smoothing help? In Advances in neural information processing systems, vol. 32."},{"key":"3724_CR31","unstructured":"Choi, D., Shallue, C.J., Nado, Z., Lee, J., Maddison, C.J., & Dahl, G.E. (2019). On empirical comparisons of optimizers for deep learning. arXiv:1910.05446"},{"key":"3724_CR32","unstructured":"Loshchilov, I., & Hutter, F. (2017). Decoupled weight decay regularization. arXiv:1711.05101"},{"key":"3724_CR33","doi-asserted-by":"crossref","unstructured":"He, K., Zhang, X., Ren, S., & Sun, J. (2016). Deep residual learning for image recognition. In Proceedings of the IEEE conference on computer vision and pattern recognition, pp. 770\u2013778","DOI":"10.1109\/CVPR.2016.90"},{"issue":"2","key":"3724_CR34","doi-asserted-by":"publisher","first-page":"289","DOI":"10.1007\/s00365-006-0663-2","volume":"26","author":"Y Yao","year":"2007","unstructured":"Yao, Y., Rosasco, L., & Caponnetto, A. (2007). On early stopping in gradient descent learning. Constructive Approximation, 26(2), 289\u2013315.","journal-title":"Constructive Approximation"},{"key":"3724_CR35","doi-asserted-by":"publisher","first-page":"14","DOI":"10.1016\/j.neunet.2021.01.026","volume":"138","author":"A Apicella","year":"2021","unstructured":"Apicella, A., Donnarumma, F., Isgr\u00f2, F., & Prevete, R. (2021). A survey on modern trainable activation functions. Neural Networks, 138, 14\u201332.","journal-title":"Neural Networks"},{"issue":"03","key":"3724_CR36","doi-asserted-by":"publisher","first-page":"186","DOI":"10.36548\/jscp.2020.3.007","volume":"2","author":"S Smys","year":"2020","unstructured":"Smys, S., Chen, J. I. Z., & Shakya, S. (2020). Survey on neural network architectures with deep learning. Journal of Soft Computing Paradigm (JSCP), 2(03), 186\u2013194.","journal-title":"Journal of Soft Computing Paradigm (JSCP)"}],"container-title":["Wireless Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11276-024-03724-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11276-024-03724-2\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11276-024-03724-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,11,23]],"date-time":"2024-11-23T08:18:53Z","timestamp":1732349933000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11276-024-03724-2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,4,5]]},"references-count":36,"journal-issue":{"issue":"9","published-print":{"date-parts":[[2024,12]]}},"alternative-id":["3724"],"URL":"https:\/\/doi.org\/10.1007\/s11276-024-03724-2","relation":{},"ISSN":["1022-0038","1572-8196"],"issn-type":[{"value":"1022-0038","type":"print"},{"value":"1572-8196","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,4,5]]},"assertion":[{"value":"8 March 2024","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"5 April 2024","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that they have no Conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}},{"value":"Not applicable for both human and\/or animal studies.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical approval"}}]}}