{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T19:33:32Z","timestamp":1780601612209,"version":"3.54.1"},"reference-count":28,"publisher":"IEEE","license":[{"start":{"date-parts":[[2021,12,15]],"date-time":"2021-12-15T00:00:00Z","timestamp":1639526400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,12,15]],"date-time":"2021-12-15T00:00:00Z","timestamp":1639526400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,12,15]],"date-time":"2021-12-15T00:00:00Z","timestamp":1639526400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021,12,15]]},"DOI":"10.1109\/bigdata52589.2021.9671964","type":"proceedings-article","created":{"date-parts":[[2022,1,13]],"date-time":"2022-01-13T20:39:16Z","timestamp":1642106356000},"page":"834-846","source":"Crossref","is-referenced-by-count":10,"title":["A Synergetic Attack against Neural Network Classifiers combining Backdoor and Adversarial Examples"],"prefix":"10.1109","author":[{"given":"Guanxiong","family":"Liu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Issa","family":"Khalil","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Abdallah","family":"Khreishah","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"NhatHai","family":"Phan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref10","first-page":"9464","article-title":"Certified adversarial robustness with additive noise","author":"li","year":"2019","journal-title":"Advances in neural information processing systems"},{"key":"ref11","article-title":"Practical black-box attacks against deep learning systems using adversarial examples","author":"papernot","year":"2017","journal-title":"ACM Asia Conference on Computer and Communications Securit"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243757"},{"key":"ref13","first-page":"2938","article-title":"How to backdoor federated learning","author":"bagdasaryan","year":"2020","journal-title":"International Conference on Artificial Intelligence and Statistics"},{"key":"ref14","article-title":"Dba: Distributed backdoor attacks against federated learning","author":"xie","year":"2019","journal-title":"International Conference on Learning Representations"},{"key":"ref15","author":"liao","year":"2018","journal-title":"Backdoor embedding in convolutional neural network models via invisible perturbation"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref17","first-page":"125","article-title":"Adversarial examples are not bugs, they are features","author":"ilyas","year":"2019","journal-title":"Advances in neural information processing systems"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref28","article-title":"On the trade-off between adversarial and backdoor robustness","volume":"33","author":"weng","year":"2020","journal-title":"Advances in neural information processing systems"},{"key":"ref4","author":"liu","year":"2019","journal-title":"Zk-gandef A gan based zero knowledge adversarial training defense for neural networks"},{"key":"ref27","author":"quiring","year":"2020","journal-title":"Backdooring and poisoning neural networks with image-scaling attacks"},{"key":"ref3","author":"madry","year":"2017","journal-title":"Towards deep learning models resistant to adversarial attacks"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref5","author":"song","year":"2018","journal-title":"Improving the Generalization of Adversarial Training with Domain Adaptation"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417253"},{"key":"ref7","author":"gao","year":"2019","journal-title":"Strip A defence against trojan attacks on deep neural networks"},{"key":"ref2","author":"gu","year":"2017","journal-title":"BadNets Identifying vulnerabilities in the machine learning model supply chain"},{"key":"ref9","article-title":"Trojaning attack on neural networks","author":"liu","year":"2017"},{"key":"ref1","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2014","journal-title":"International Conference on Learning Representations"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00044"},{"key":"ref22","author":"athalye","year":"2018","journal-title":"Obfuscated gradients give a false sense of security Circumventing defenses to adversarial examples"},{"key":"ref21","article-title":"Scalable differential privacy with certified robustness in adversarial learning","author":"phan","year":"2020","journal-title":"37th International Conference on Machine Learning"},{"key":"ref24","article-title":"Adversarial machine learning at scale","author":"kurakin","year":"2017","journal-title":"International Conference on Learning Representations"},{"key":"ref23","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2015","journal-title":"International Conference on Learning Representations"},{"key":"ref26","first-page":"118","article-title":"Machine learning with adversaries: Byzantine tolerant gradient descent","author":"blanchard","year":"2017","journal-title":"Proceedings of the 31st International Conference on Neural Information Processing Systems"},{"key":"ref25","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","author":"mcmahan","year":"2017","journal-title":"Artificial Intelligence and Statistics"}],"event":{"name":"2021 IEEE International Conference on Big Data (Big Data)","location":"Orlando, FL, USA","start":{"date-parts":[[2021,12,15]]},"end":{"date-parts":[[2021,12,18]]}},"container-title":["2021 IEEE International Conference on Big Data (Big Data)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9671263\/9671273\/09671964.pdf?arnumber=9671964","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,10]],"date-time":"2022-05-10T16:55:33Z","timestamp":1652201733000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9671964\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,12,15]]},"references-count":28,"URL":"https:\/\/doi.org\/10.1109\/bigdata52589.2021.9671964","relation":{},"subject":[],"published":{"date-parts":[[2021,12,15]]}}}