{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,22]],"date-time":"2026-07-22T20:07:01Z","timestamp":1784750821276,"version":"3.55.0"},"reference-count":53,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/access.2026.3709411","type":"journal-article","created":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T19:53:43Z","timestamp":1783108423000},"page":"107161-107176","source":"Crossref","is-referenced-by-count":0,"title":["A4O-Attack: All Triggers for One Sample Backdoor Attacks"],"prefix":"10.1109","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1708-113X","authenticated-orcid":false,"given":"Duc","family":"Anh Vu","sequence":"first","affiliation":[{"name":"Posts and Telecommunications Institute of Technology","place":["Hanoi, Vietnam"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Vuong Quoc Anh","family":"Pham","sequence":"additional","affiliation":[{"name":"VNU University of Science","place":["Hanoi, Vietnam"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-6823-5603","authenticated-orcid":false,"given":"Le Hoang","family":"Nguyen","sequence":"additional","affiliation":[{"name":"Posts and Telecommunications Institute of Technology","place":["Hanoi, Vietnam"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1019-4174","authenticated-orcid":false,"given":"Thai","family":"Son Nguyen","sequence":"additional","affiliation":[{"name":"VinUniversity","place":["Hanoi, Vietnam"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9467-4978","authenticated-orcid":false,"given":"Cong","family":"Tran","sequence":"additional","affiliation":[{"name":"Posts and Telecommunications Institute of Technology","place":["Hanoi, Vietnam"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0973-0889","authenticated-orcid":false,"given":"Cuong","family":"Pham","sequence":"additional","affiliation":[{"name":"Posts and Telecommunications Institute of Technology","place":["Hanoi, Vietnam"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2024.3411936"},{"key":"ref2","article-title":"Targeted backdoor attacks on deep learning systems using data poisoning","author":"Chen","year":"2017","journal-title":"arXiv:1712.05526"},{"key":"ref3","article-title":"WaNet - imperceptible warping-based backdoor attack","author":"Nguyen","year":"2021","journal-title":"arXiv:2102.10369"},{"key":"ref4","article-title":"BadNets: Identifying vulnerabilities in the machine learning model supply chain","author":"Gu","year":"2017","journal-title":"arXiv:1708.06733"},{"key":"ref5","article-title":"Multi-trigger backdoor attacks: More triggers, more threats","author":"Li","year":"2024","journal-title":"arXiv:2401.15295"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2024.3417410"},{"key":"ref7","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2012.02.016"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.425"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01570"},{"key":"ref12","article-title":"Backdoor secrets unveiled: Identifying backdoor data with optimized scaled prediction consistency","author":"Pal","year":"2024","journal-title":"arXiv:2403.10717"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359790"},{"issue":"7","key":"ref14","first-page":"3","article-title":"Tiny imagenet visual recognition challenge","volume":"7","author":"Le","year":"2015","journal-title":"CS 231N"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP53844.2022.00049"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1021\/es3040472"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3028448"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.52202\/068431-2772"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ICSIP61881.2024.10671403"},{"key":"ref20","article-title":"Imperceptible and multi-channel backdoor attack against deep neural networks","author":"Xue","year":"2022","journal-title":"arXiv:2201.13164"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.52202\/068431-1606"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref23","first-page":"19837","article-title":"Reconstructive neuron pruning for backdoor defense","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Li"},{"key":"ref24","article-title":"Towards reliable and efficient backdoor trigger inversion via decoupling benign features","volume-title":"Proc. 12th Int. Conf. Learn. Represent.","author":"Xu"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46493-0_38"},{"key":"ref26","article-title":"Adversarial unlearning of backdoors via implicit hypergradient","author":"Zeng","year":"2021","journal-title":"arXiv:2110.03735"},{"key":"ref27","first-page":"16913","article-title":"Adversarial neuron pruning purifies backdoored deep models","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Wu"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3286842"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00786"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2941376"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23291"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3503161.3548171"},{"key":"ref33","article-title":"Neural attention distillation: Erasing backdoor triggers from deep neural networks","author":"Li","year":"2021","journal-title":"arXiv:2101.05930"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-20065-6_11"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01300"},{"key":"ref36","first-page":"3454","article-title":"Input-aware dynamic backdoor attack","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Nguyen"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01175"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6871"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i3.28019"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1021\/acs.jcim.9b00266"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/s00894-021-04674-8"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1038\/nature24270"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1126\/science.ade9097"},{"key":"ref44","first-page":"2","article-title":"Bert: Pre-training of deep bidirectional transformers for language understanding","volume-title":"Proc. NaacL-HLT","author":"Kenton"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2019.8802997"},{"key":"ref46","article-title":"Revisiting the assumption of latent separability for backdoor defenses","volume-title":"Proc. 11th Int. Conf. Learn. Represent.","author":"Qi"},{"key":"ref47","article-title":"Defending against backdoor attack on deep neural networks","author":"Cheng","year":"2020","journal-title":"arXiv:2002.12162"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3427228.3427264"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.74"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2017.8296389"},{"key":"ref51","article-title":"An image is worth 16$\\times$\n16 words: Transformers for image recognition at scale","author":"Dosovitskiy","year":"2020","journal-title":"arXiv:2010.11929"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00226"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363216"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6287639\/11323511\/11594114.pdf?arnumber=11594114","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,22]],"date-time":"2026-07-22T19:17:16Z","timestamp":1784747836000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11594114\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":53,"URL":"https:\/\/doi.org\/10.1109\/access.2026.3709411","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}