{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,28]],"date-time":"2025-09-28T20:52:54Z","timestamp":1759092774893},"reference-count":34,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,10,16]],"date-time":"2022-10-16T00:00:00Z","timestamp":1665878400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,10,16]],"date-time":"2022-10-16T00:00:00Z","timestamp":1665878400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,10,16]]},"DOI":"10.1109\/icip46576.2022.9897387","type":"proceedings-article","created":{"date-parts":[[2022,11,3]],"date-time":"2022-11-03T21:27:24Z","timestamp":1667510844000},"page":"2486-2490","source":"Crossref","is-referenced-by-count":0,"title":["CRAB: Certified Patch Robustness Against Poisoning-Based Backdoor Attacks"],"prefix":"10.1109","author":[{"given":"Huxiao","family":"Ji","sequence":"first","affiliation":[{"name":"Shanghai Jiao Tong University,Department of Computer Science and Engineering,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jie","family":"Li","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University,Department of Computer Science and Engineering,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chentao","family":"Wu","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University,Department of Computer Science and Engineering,China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref2","article-title":"An image is worth 16x16 words: Transformers for image recognition at scale","author":"Dosovitskiy","year":"2021","journal-title":"ICLR"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/IJCB48548.2020.9304875"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6871"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3423362"},{"key":"ref7","article-title":"Input-aware dynamic backdoor attack","author":"Nguyen","year":"2020","journal-title":"NeurIPS"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP48549.2020.00019"},{"article-title":"Targeted backdoor attacks on deep learning systems using data poisoning","year":"2017","author":"Chen","key":"ref9"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SPW50608.2020.00024"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01267-0_40"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01615"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3394486.3403064"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01321"},{"article-title":"On Hiding Neural Networks Inside Neural Networks","year":"2020","author":"Guo","key":"ref15"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"ref17","article-title":"Defending against backdoor attack on deep neural networks","author":"Xu","year":"2019","journal-title":"KDD Workshop"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref19","article-title":"Defending neural backdoors via generative distribution modeling","author":"Qiao","year":"2019","journal-title":"NeurIPS"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM50108.2020.00025"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58592-1_14"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/SPW50608.2020.00025"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.74"},{"article-title":"Neuroninspect: Detecting backdoors in neural networks via output explanations","year":"2019","author":"Huang","key":"ref24"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359790"},{"key":"ref26","article-title":"On certifying robustness against backdoor attacks via randomized smoothing","author":"Wang","year":"2020","journal-title":"CVPR Workshop"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179451"},{"key":"ref28","article-title":"Certified defenses for adversarial patches","author":"Chiang","year":"2020","journal-title":"ICLR"},{"article-title":"On the effectiveness of interval bound propagation for training verifiably robust models","year":"2018","author":"Gowal","key":"ref29"},{"key":"ref30","article-title":"Certified robustness against adversarial patch attacks via randomized cropping","author":"Lin","year":"2021","journal-title":"ICML Workshop"},{"key":"ref31","article-title":"(de) randomized smoothing for certifiable defense against patch attacks","author":"Levine","year":"2020","journal-title":"NeurIPS"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01471"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/SPW50608.2020.00026"},{"key":"ref34","article-title":"Patch-Guard: A provably robust defense against adversarial patches via small receptive fields and masking","author":"Chong","year":"2021","journal-title":"USENIX Security"}],"event":{"name":"2022 IEEE International Conference on Image Processing (ICIP)","start":{"date-parts":[[2022,10,16]]},"location":"Bordeaux, France","end":{"date-parts":[[2022,10,19]]}},"container-title":["2022 IEEE International Conference on Image Processing (ICIP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9897158\/9897159\/09897387.pdf?arnumber=9897387","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,22]],"date-time":"2024-01-22T21:17:55Z","timestamp":1705958275000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9897387\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,10,16]]},"references-count":34,"URL":"https:\/\/doi.org\/10.1109\/icip46576.2022.9897387","relation":{},"subject":[],"published":{"date-parts":[[2022,10,16]]}}}