{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T18:19:46Z","timestamp":1775067586966,"version":"3.50.1"},"reference-count":58,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/100000183","name":"Army Research Office","doi-asserted-by":"publisher","award":["W911NF-21-1-0155"],"award-info":[{"award-number":["W911NF-21-1-0155"]}],"id":[{"id":"10.13039\/100000183","id-type":"DOI","asserted-by":"publisher"}]},{"name":"New York University Abu Dhabi (NYUAD) Center for Artificial Intelligence and Robotics"},{"name":"Tamkeen under the NYUAD Research Institute Award","award":["CG010"],"award-info":[{"award-number":["CG010"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/access.2025.3543333","type":"journal-article","created":{"date-parts":[[2025,2,18]],"date-time":"2025-02-18T18:24:15Z","timestamp":1739903055000},"page":"36099-36111","source":"Crossref","is-referenced-by-count":2,"title":["Detecting All-to-One Backdoor Attacks in Black-Box DNNs via Differential Robustness to Noise"],"prefix":"10.1109","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-8282-6580","authenticated-orcid":false,"given":"Hao","family":"Fu","sequence":"first","affiliation":[{"name":"Department of Electrical and Computer Engineering, New York University, Brooklyn, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8264-7972","authenticated-orcid":false,"given":"Prashanth","family":"Krishnamurthy","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, New York University, Brooklyn, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6158-9512","authenticated-orcid":false,"given":"Siddharth","family":"Garg","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, New York University, Brooklyn, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8418-004X","authenticated-orcid":false,"given":"Farshad","family":"Khorrami","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, New York University, Brooklyn, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","first-page":"1","article-title":"Bait and switch: Online training data poisoning of autonomous driving systems","volume-title":"Proc. NeurIPS Workshop Dataset Curation Secur.","author":"Patel"},{"key":"ref2","article-title":"Hedge fund portfolio construction using PolyModel theory and iTransformer","author":"Zhao","year":"2024","journal-title":"arXiv:2408.03320"},{"key":"ref3","article-title":"Face-GPS: A comprehensive technique for quantifying facial muscle dynamics in videos","author":"Kim","year":"2024","journal-title":"arXiv:2401.05625"},{"key":"ref4","article-title":"PolyModel for Hedge Funds\u2019 portfolio construction using machine learning","author":"Zhao","year":"2024","journal-title":"arXiv:2412.11019"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/CCTA41146.2020.9206312"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3245570"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.21314\/JCF.2023.003"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3263507"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23291"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01175"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363216"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102277"},{"key":"ref15","first-page":"1","article-title":"AEVA: Black-box backdoor detection using adversarial extreme value analysis","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Guo"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01617"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359790"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3297056"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01615"},{"key":"ref20","first-page":"3454","article-title":"Input-aware dynamic backdoor attack","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Nguyen"},{"key":"ref21","first-page":"8068","article-title":"Handcrafted backdoors in deep neural networks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Hong"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3028448"},{"key":"ref23","first-page":"1","article-title":"WaNet\u2013imperceptible warping-based backdoor attack","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Nguyen"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref25","first-page":"14004","article-title":"Defending neural backdoors via generative distribution modeling","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"32","author":"Qiao"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-20065-6_11"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3141077"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01465"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i9.21191"},{"key":"ref30","first-page":"11372","article-title":"CRFL: Certifiably robust federated learning against backdoor attacks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Xie"},{"key":"ref31","first-page":"31474","article-title":"BagFlip: A certified defense against data poisoning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Zhang"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3427228.3427264"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/SPW50608.2020.00025"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.74"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3207839"},{"key":"ref36","article-title":"Adversarial samples for deep monocular 6D object pose estimation","author":"Zhang","year":"2022","journal-title":"arXiv:2203.00302"},{"key":"ref37","first-page":"1310","article-title":"Certified adversarial robustness via randomized smoothing","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Cohen"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/377939.377946"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TBDATA.2019.2921572"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1162\/089976601750264965"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2008.17"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/342009.335388"},{"key":"ref43","author":"LeCun","year":"2010","journal-title":"MNIST Handwritten Digit Database"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2012.02.016"},{"key":"ref45","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2011.5995566"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3032411"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.23919\/DATE48585.2020.9116489"},{"key":"ref50","article-title":"Targeted backdoor attacks on deep learning systems using data poisoning","author":"Chen","year":"2017","journal-title":"arXiv:1712.05526"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/3474369.3486874"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref53","first-page":"1","article-title":"Network in network","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Lin"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2014.244"},{"issue":"3","key":"ref55","first-page":"61","article-title":"Probabilistic outputs for support vector machines and comparisons to regularized likelihood methods","volume":"10","author":"Platt","year":"1999","journal-title":"Adv. Large Margin Classifiers"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.29172\/7c2a6982-6d72-4cd8-bba6-2fccb06a7011"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00015"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3670361"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6287639\/10820123\/10891759.pdf?arnumber=10891759","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,3]],"date-time":"2025-03-03T18:40:45Z","timestamp":1741027245000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10891759\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":58,"URL":"https:\/\/doi.org\/10.1109\/access.2025.3543333","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}