{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T00:08:06Z","timestamp":1783037286419,"version":"3.54.6"},"reference-count":59,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,12,8]],"date-time":"2025-12-08T00:00:00Z","timestamp":1765152000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,12,8]],"date-time":"2025-12-08T00:00:00Z","timestamp":1765152000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,12,8]]},"DOI":"10.1109\/acsac67867.2025.00081","type":"proceedings-article","created":{"date-parts":[[2026,2,24]],"date-time":"2026-02-24T20:54:58Z","timestamp":1771966498000},"page":"986-1002","source":"Crossref","is-referenced-by-count":1,"title":["Flashy Backdoor: Real-world Environment Backdoor Attack on SNNs with DVS Cameras"],"prefix":"10.1109","author":[{"given":"Roberto","family":"Ria\u00f1o","sequence":"first","affiliation":[{"name":"Radboud University,The Netherlands Ikerlan Research Centre,Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Gorka","family":"Abad","sequence":"additional","affiliation":[{"name":"University of Bergen,Norway"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Stjepan","family":"Picek","sequence":"additional","affiliation":[{"name":"Univ. of Zagreb, Croatia Radboud University,Faculty of Elec. Eng. and Computing,The Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Aitor","family":"Urbieta","sequence":"additional","affiliation":[{"name":"Ikerlan Research Centre,Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Semantic segmentation for autonomous driving: Model evaluation, dataset generation, perspective comparison, and real-time capability","author":"Cakir","year":"2022","journal-title":"arXiv preprint arXiv"},{"key":"ref2","first-page":"4171","article-title":"BERT: pre-training of deep bidirectional transformers for language understanding","volume-title":"Proceedings of the 2019 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, NAACL-HLT 2019","volume":"1","author":"Devlin","year":"2019"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2013.6638947"},{"key":"ref4","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3458817.3476209","article-title":"Efficient large-scale language model training on gpu clusters using megatron-lm","volume-title":"Proceedings of the International Conference for High Performance Computing, Networking, Storage and Analysis","author":"Narayanan","year":"2021"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1142\/s0129065709002002"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2018.12.002"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2023.3308088"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00266"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6787"},{"key":"ref10","doi-asserted-by":"crossref","DOI":"10.1017\/CBO9780511815706","volume-title":"Spiking Neuron Models: Single Neurons, Populations, Plasticity","author":"Gerstner","year":"2002"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/WACV48630.2021.00400"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/JSSC.2012.2230553"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2020.2985815"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2019.2928127"},{"key":"ref15","article-title":"Autonomous driving with spiking neural networks","volume":"abs\/2405.19687","author":"Zhu","year":"2024","journal-title":"CoRR"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/lra.2018.2793357"},{"key":"ref17","article-title":"Spinnaker2: A large-scale neuromorphic system for event-based and asynchronous machine learning","volume":"abs\/2401.04491","author":"Gonzalez","year":"2024","journal-title":"CoRR"},{"key":"ref18","volume-title":"Frontgrade gaisler licenses brainchip\u2019s akida ip to deploy ai chips into space","author":"Ltd","year":"2024"},{"key":"ref19","volume-title":"Brainchip awarded air force research laboratory radar development contract","author":"Ltd","year":"2024"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-008-0201-1"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2005.1556220"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2013.09.049"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3563532"},{"key":"ref24","doi-asserted-by":"crossref","DOI":"10.14722\/ndss.2024.24334","article-title":"Sneaky spikes: Uncovering stealthy backdoor attacks in spiking neural networks with neuromorphic data","volume-title":"31st Annual Network and Distributed System Security Symposium, NDSS 2024","author":"Abad","year":"2024"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.3389\/fnins.2015.00437"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.3389\/fnins.2017.00309"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr.2017.781"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359790"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3427228.3427264"},{"key":"ref31","article-title":"Badexpert: Extracting backdoor functionality for accurate backdoor input detection","volume-title":"The Twelfth International Conference on Learning Representations, ICLR 2024","author":"Xie","year":"2024"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1162\/neco_a_01424"},{"key":"ref33","article-title":"Temporal efficient training of spiking neural network via gradient re-weighting","volume":"abs\/2202.11946","author":"Deng","year":"2022","journal-title":"ArXiv"},{"key":"ref34","first-page":"2328","article-title":"Optimal ANN-SNN conversion for fast and accurate inference in deep spiking neural networks","volume-title":"Proceedings of the Thirtieth International Joint Conference on Artificial Intelligence, IJCAI 2021","author":"Ding","year":"2021"},{"key":"ref35","article-title":"An overview of gradient descent optimization algorithms","author":"Ruder","year":"2016","journal-title":"arXiv preprint arXiv"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/tpami.2020.3008413"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/iccv48922.2021.01615"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00614"},{"key":"ref40","article-title":"Backdoor embedding in convolutional neural network models via invisible perturbation","author":"Liao","year":"2018","journal-title":"arXiv preprint arXiv"},{"key":"ref41","article-title":"Label-consistent backdoor attacks","author":"Turner","year":"2019","journal-title":"arXiv preprint arXiv"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2021.3106961"},{"key":"ref43","article-title":"Data poisoning-based backdoor attack framework against supervised learning rules of spiking neural networks","volume":"abs\/2409.15670","author":"Jin","year":"2024","journal-title":"CoRR"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-96-7005-5_17"},{"key":"ref45","article-title":"Fine-tuning is all you need to mitigate backdoor attacks","volume":"abs\/2212.09067","author":"Sha","year":"2022","journal-title":"CoRR"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-24574-4_28"},{"key":"ref47","article-title":"The pile: An 800gb dataset of diverse text for language modeling","volume":"abs\/2101.00027","author":"Gao","year":"2021","journal-title":"CoRR"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1186\/s40537-023-00727-2"},{"issue":"2","key":"ref49","doi-asserted-by":"crossref","DOI":"10.3390\/app11020749","article-title":"Classification and quantification of human error in manufacturing: A case study in complex manual assembly","volume":"11","author":"Torres","year":"2021","journal-title":"Applied Sciences"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1186\/s40537-020-00313-w"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-17143-7_17"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2019.8851732"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN52387.2021.9534364"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.3389\/fnins.2022.1068193"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/ijcnn48605.2020.9207297"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA52953.2021.00132"},{"key":"ref57","article-title":"Defending spiking neural networks against adversarial attacks through image purification","author":"Chen","year":"2024","journal-title":"arXiv preprint arXiv"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-032-07884-1_1"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1126\/sciadv.adi1480"}],"event":{"name":"2025 IEEE Annual Computer Security Applications Conference (ACSAC)","location":"Honolulu, HI, USA","start":{"date-parts":[[2025,12,8]]},"end":{"date-parts":[[2025,12,12]]}},"container-title":["2025 IEEE Annual Computer Security Applications Conference (ACSAC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11391636\/11391706\/11391974.pdf?arnumber=11391974","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,25]],"date-time":"2026-02-25T07:01:17Z","timestamp":1772002877000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11391974\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,12,8]]},"references-count":59,"URL":"https:\/\/doi.org\/10.1109\/acsac67867.2025.00081","relation":{},"subject":[],"published":{"date-parts":[[2025,12,8]]}}}