{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,14]],"date-time":"2026-04-14T01:03:49Z","timestamp":1776128629228,"version":"3.50.1"},"reference-count":62,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61972373"],"award-info":[{"award-number":["61972373"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Neurocomputing"],"published-print":{"date-parts":[[2026,6]]},"DOI":"10.1016\/j.neucom.2026.133283","type":"journal-article","created":{"date-parts":[[2026,3,7]],"date-time":"2026-03-07T23:27:58Z","timestamp":1772926078000},"page":"133283","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["NeuroPatch: Lightweight diffusion model repair for backdoor attack mitigation based on neuron-level patching"],"prefix":"10.1016","volume":"680","author":[{"given":"Chengze","family":"Wu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-5063-8209","authenticated-orcid":false,"given":"Xiaoning","family":"Ren","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6031-762X","authenticated-orcid":false,"given":"Chongyang","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yinxing","family":"Xue","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"78","reference":[{"key":"10.1016\/j.neucom.2026.133283_bib0005","series-title":"Proceedings of the AAAI Conference on Artificial Intelligence","first-page":"10847","article-title":"Elijah: eliminating backdoors injected in diffusion models via distribution shift","author":"An","year":"2024"},{"key":"10.1016\/j.neucom.2026.133283_bib0010","author":"Bertrand"},{"key":"10.1016\/j.neucom.2026.133283_bib0015","series-title":"European Conference on Computer Vision","first-page":"242","article-title":"Safe-sim: safety-critical closed-loop traffic simulation with diffusion-controllable adversaries","author":"Chang","year":"2024"},{"key":"10.1016\/j.neucom.2026.133283_bib0020","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"4035","article-title":"Trojdiff: trojan attacks on diffusion models with diverse targets","author":"Chen","year":"2023"},{"key":"10.1016\/j.neucom.2026.133283_bib0025","series-title":"Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis","first-page":"908","article-title":"Interpretability based neural network repair","author":"Chen","year":"2024"},{"key":"10.1016\/j.neucom.2026.133283_bib0030","series-title":"International Conference on Machine Learning","first-page":"1887","article-title":"Fair generative modeling via weak supervision","author":"Choi","year":"2020"},{"key":"10.1016\/j.neucom.2026.133283_bib0035","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"4015","article-title":"How to backdoor diffusion models?","author":"Chou","year":"2023"},{"key":"10.1016\/j.neucom.2026.133283_bib0040","article-title":"Villandiffusion: a unified backdoor attack framework for diffusion models","volume":"36","author":"Chou","year":"2024","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.neucom.2026.133283_bib0045","first-page":"8780","article-title":"Diffusion models beat gans on image synthesis","volume":"34","author":"Dhariwal","year":"2021","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.neucom.2026.133283_bib0050","author":"Gal"},{"key":"10.1016\/j.neucom.2026.133283_bib0055","author":"Gillman"},{"key":"10.1016\/j.neucom.2026.133283_bib0060","author":"Gu"},{"key":"10.1016\/j.neucom.2026.133283_bib0065","author":"Guan"},{"key":"10.1016\/j.neucom.2026.133283_bib0070","doi-asserted-by":"crossref","first-page":"383","DOI":"10.1080\/01621459.1974.10482962","article-title":"The influence curve and its role in robust estimation","volume":"69","author":"Hampel","year":"1974","journal-title":"J. Am. Stat. Assoc."},{"key":"10.1016\/j.neucom.2026.133283_bib0075","author":"Hao"},{"key":"10.1016\/j.neucom.2026.133283_bib0080","article-title":"Gans trained by a two time-scale update rule converge to a local nash equilibrium","volume":"30","author":"Heusel","year":"2017","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.neucom.2026.133283_bib0085","first-page":"6840","article-title":"Denoising diffusion probabilistic models","volume":"33","author":"Ho","year":"2020","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.neucom.2026.133283_bib0090","first-page":"8633","article-title":"Video diffusion models","volume":"35","author":"Ho","year":"2022","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.neucom.2026.133283_bib0095","doi-asserted-by":"crossref","first-page":"455","DOI":"10.1023\/A:1008306431147","article-title":"Efficient global optimization of expensive black-box functions","volume":"13","author":"Jones","year":"1998","journal-title":"J. Glob. Optim."},{"key":"10.1016\/j.neucom.2026.133283_bib0100","doi-asserted-by":"crossref","first-page":"7303","DOI":"10.1038\/s41598-023-34341-2","article-title":"Denoising diffusion probabilistic models for 3d medical image generation","volume":"13","author":"Khader","year":"2023","journal-title":"Sci. Rep."},{"key":"10.1016\/j.neucom.2026.133283_bib0105","series-title":"International Conference on Medical Image Computing and Computer-Assisted Intervention","first-page":"539","article-title":"Diffusion deformable model for 4d temporal medical image generation","author":"Kim","year":"2022"},{"key":"10.1016\/j.neucom.2026.133283_bib0110","series-title":"International Conference on Learning Representations","article-title":"Diffwave: a versatile diffusion model for audio synthesis","author":"Kong","year":"2021"},{"key":"10.1016\/j.neucom.2026.133283_bib0115","unstructured":"A. Krizhevsky, G. Hinton, et al., Learning multiple layers of features from tiny images, Technical Report, University of Toronto, 2009, URL: http:\/\/www.cs.utoronto.ca\/kriz\/learning-features-2009-TR.pdf"},{"key":"10.1016\/j.neucom.2026.133283_bib0120","unstructured":"C. Li, R. Pang, B. Cao, J. Chen, T. Wang, A change of heart: backdoor attacks on security-centric diffusion models, 2023, OpenReview Preprint, URL: https:\/\/openreview.net\/forum?id=Gf4KZIqLHD"},{"key":"10.1016\/j.neucom.2026.133283_bib0125","unstructured":"S. Li, J. Ma, M. Cheng, Learnable invisible backdoor for diffusion models, 2024, OpenReview Preprint, URL: https:\/\/openreview.net\/forum?id=scFfMOOGD8"},{"key":"10.1016\/j.neucom.2026.133283_bib0130","series-title":"International Symposium on Research in Attacks, Intrusions, and Defenses","first-page":"273","article-title":"Fine-pruning: defending against backdooring attacks on deep neural networks","author":"Liu","year":"2018"},{"key":"10.1016\/j.neucom.2026.133283_bib0135","series-title":"Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security","first-page":"1265","article-title":"ABS: scanning neural networks for back-doors by artificial brain stimulation","author":"Liu","year":"2019"},{"key":"10.1016\/j.neucom.2026.133283_bib0140","series-title":"Proceedings of the IEEE International Conference on Computer Vision","first-page":"3730","article-title":"Deep learning face attributes in the wild","author":"Liu","year":"2015"},{"key":"10.1016\/j.neucom.2026.133283_bib0145","first-page":"5775","article-title":"Dpm-solver: a fast ODE solver for diffusion probabilistic model sampling in around 10 steps","volume":"35","author":"Lu","year":"2022","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.neucom.2026.133283_bib0150","author":"Lu"},{"key":"10.1016\/j.neucom.2026.133283_bib0155","first-page":"56338","article-title":"Stable bias: evaluating societal representations in diffusion models","volume":"36","author":"Luccioni","year":"2023","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.neucom.2026.133283_bib0160","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2023.103365","article-title":"Object-free backdoor attack and defense on semantic segmentation","volume":"132","author":"Mao","year":"2023","journal-title":"Comput. & Secur."},{"key":"10.1016\/j.neucom.2026.133283_bib0165","series-title":"Nonlinear Multiobjective Optimization","volume":"vol. 12","author":"Miettinen","year":"1999"},{"key":"10.1016\/j.neucom.2026.133283_bib0170","author":"Mo"},{"key":"10.1016\/j.neucom.2026.133283_bib0175","author":"Myat Min"},{"key":"10.1016\/j.neucom.2026.133283_bib0180","series-title":"International Conference on Machine Learning","first-page":"8162","article-title":"Improved denoising diffusion probabilistic models","author":"Nichol","year":"2021"},{"key":"10.1016\/j.neucom.2026.133283_bib0185","series-title":"NeurIPS 2023 Workshop on Backdoors in Deep Learning-The Good, the Bad, and the Ugly","article-title":"From trojan horses to castle walls: unveiling bilateral backdoor effects in diffusion models","author":"Pan","year":"2023"},{"key":"10.1016\/j.neucom.2026.133283_bib0190","author":"Qian"},{"key":"10.1016\/j.neucom.2026.133283_bib0195","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.104225","article-title":"Evading backdoor defenses: concealing genuine backdoors through scapegoat strategy","volume":"150","author":"Qian","year":"2025","journal-title":"Comput. & Secur."},{"key":"10.1016\/j.neucom.2026.133283_bib0200","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"10684","article-title":"High-resolution image synthesis with latent diffusion models","author":"Rombach","year":"2022"},{"key":"10.1016\/j.neucom.2026.133283_bib0205","series-title":"Medical Image Computing and Computer-Assisted Intervention\u2013MICCAI 2015: 18th International Conference, Munich, Germany, October 5\u20139, 2015, Proceedings, Part III 18","first-page":"234","article-title":"U-net: convolutional networks for biomedical image segmentation","author":"Ronneberger","year":"2015"},{"key":"10.1016\/j.neucom.2026.133283_bib0210","first-page":"36479","article-title":"Photorealistic text-to-image diffusion models with deep language understanding","volume":"35","author":"Saharia","year":"2022","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.neucom.2026.133283_bib0215","doi-asserted-by":"crossref","first-page":"1379","DOI":"10.1080\/01621459.1968.10480934","article-title":"Estimates of the regression coefficient based on kendall\u2019s tau","volume":"63","author":"Sen","year":"1968","journal-title":"J. Am. Stat. Assoc."},{"key":"10.1016\/j.neucom.2026.133283_bib0220","author":"Song"},{"key":"10.1016\/j.neucom.2026.133283_bib0225","article-title":"Generative modeling by estimating gradients of the data distribution","volume":"32","author":"Song","year":"2019","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.neucom.2026.133283_bib0230","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision","first-page":"4584","article-title":"Rickrolling the artist: injecting backdoors into text encoders for text-to-image synthesis","author":"Struppek","year":"2023"},{"key":"10.1016\/j.neucom.2026.133283_bib0235","author":"Sui"},{"key":"10.1016\/j.neucom.2026.133283_bib0240","series-title":"Proceedings of the 33rd USENIX Security Symposium. USENIX Association, San Francisco, CA, USA","article-title":"Neural network semantic backdoor detection and mitigation: a causality-based approach","author":"Sun","year":"2024"},{"key":"10.1016\/j.neucom.2026.133283_bib0245","series-title":"2020 International Joint Conference on Neural Networks (Ijcnn)","first-page":"1","article-title":"Catastrophic forgetting and mode collapse in gans","author":"Thanh-Tung","year":"2020"},{"key":"10.1016\/j.neucom.2026.133283_bib0250","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3721479","article-title":"Attacks and defenses for generative diffusion models: a comprehensive survey","volume":"57","author":"Truong","year":"2025","journal-title":"ACM Comput. Surv."},{"key":"10.1016\/j.neucom.2026.133283_bib0255","author":"Truong"},{"key":"10.1016\/j.neucom.2026.133283_bib0260","doi-asserted-by":"crossref","first-page":"4865","DOI":"10.1109\/TIFS.2024.3386058","article-title":"Bagm: a backdoor attack for manipulating text-to-image generative models","volume":"19","author":"Vice","year":"2024","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.neucom.2026.133283_bib0265","series-title":"2019 IEEE Symposium on Security and Privacy (SP)","first-page":"707","article-title":"Neural cleanse: identifying and mitigating backdoor attacks in neural networks","author":"Wang","year":"2019"},{"key":"10.1016\/j.neucom.2026.133283_bib0270","series-title":"Proceedings of the 32nd ACM International Conference on Multimedia","first-page":"3657","article-title":"Eviledit: backdooring text-to-image diffusion models in one second","author":"Wang","year":"2024"},{"key":"10.1016\/j.neucom.2026.133283_bib0275","author":"Wang"},{"key":"10.1016\/j.neucom.2026.133283_bib0280","series-title":"The Second Workshop on New Frontiers in Adversarial Machine Learning","article-title":"Diffscene: diffusion-based safety-critical scenario generation for autonomous vehicles","author":"Xu","year":"2023"},{"key":"10.1016\/j.neucom.2026.133283_bib0285","author":"Xu"},{"key":"10.1016\/j.neucom.2026.133283_bib0290","series-title":"Proceedings of the 31st ACM International Conference on Multimedia","first-page":"1577","article-title":"Text-to-image diffusion models can be easily backdoored through multimodal data poisoning","author":"Zhai","year":"2023"},{"key":"10.1016\/j.neucom.2026.133283_bib0295","author":"Zhao"},{"key":"10.1016\/j.neucom.2026.133283_bib0300","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2024.125856","article-title":"Clean-label backdoor attack and defense: an examination of language model vulnerability","volume":"265","author":"Zhao","year":"2025","journal-title":"Expert Syst. Appl."},{"key":"10.1016\/j.neucom.2026.133283_bib0305","article-title":"Unipc: a unified predictor-corrector framework for fast sampling of diffusion models","volume":"36","author":"Zhao","year":"2024","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.neucom.2026.133283_bib0310","series-title":"Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security","first-page":"141","article-title":"Ai-lancet: locating error-inducing neurons to optimize neural networks","author":"Zhao","year":"2021"}],"container-title":["Neurocomputing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0925231226006806?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0925231226006806?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,4,14]],"date-time":"2026-04-14T00:32:57Z","timestamp":1776126777000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0925231226006806"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6]]},"references-count":62,"alternative-id":["S0925231226006806"],"URL":"https:\/\/doi.org\/10.1016\/j.neucom.2026.133283","relation":{},"ISSN":["0925-2312"],"issn-type":[{"value":"0925-2312","type":"print"}],"subject":[],"published":{"date-parts":[[2026,6]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"NeuroPatch: Lightweight diffusion model repair for backdoor attack mitigation based on neuron-level patching","name":"articletitle","label":"Article Title"},{"value":"Neurocomputing","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.neucom.2026.133283","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"133283"}}