{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,15]],"date-time":"2025-11-15T07:28:29Z","timestamp":1763191709621,"version":"3.45.0"},"reference-count":34,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,6,30]],"date-time":"2025-06-30T00:00:00Z","timestamp":1751241600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,6,30]],"date-time":"2025-06-30T00:00:00Z","timestamp":1751241600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,6,30]]},"DOI":"10.1109\/ijcnn64981.2025.11227936","type":"proceedings-article","created":{"date-parts":[[2025,11,14]],"date-time":"2025-11-14T18:46:15Z","timestamp":1763145975000},"page":"1-8","source":"Crossref","is-referenced-by-count":0,"title":["OCAGE: An Input-Level One-Class Backdoor Detection Method Using Feature Map Extraction for DNN"],"prefix":"10.1109","author":[{"given":"Han Lin","family":"Tun","sequence":"first","affiliation":[{"name":"Shanghai Jiao Tong University,School of Cyber Science and Engineering,China,200240"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Haiyang","family":"Yu","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University,School of Cyber Science and Engineering,China,200240"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tian","family":"Xie","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University,School of Cyber Science and Engineering,China,200240"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ping","family":"Yi","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University,School of Cyber Science and Engineering,China,200240"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/NTMS.2018.8328749"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.scs.2020.102692"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3180155.3180220"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2022.3182979"},{"journal-title":"Wanet\u2013imperceptible warping-based backdoor attack","year":"2021","author":"Nguyen","key":"ref5"},{"journal-title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","year":"2017","author":"Gu","key":"ref6"},{"key":"ref7","article-title":"Spectral signatures in backdoor attacks","volume":"31","author":"Tran","year":"2018","journal-title":"Advances in neural information processing systems"},{"key":"ref8","first-page":"14 900","article-title":"Anti-backdoor learning: Training clean models on poisoned data","volume":"34","author":"Li","year":"2021","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-33377-4_33"},{"key":"ref10","first-page":"36 396","article-title":"Training with more confidence: Mitigating injected and natural backdoors during training","volume":"35","author":"Wang","year":"2022","journal-title":"Advances in Neural Information Processing Systems"},{"journal-title":"Backdoor defense via decoupling the training process","year":"2022","author":"Huang","key":"ref11"},{"article-title":"Setting the trap: Capturing and defeating backdoor threats in plms through honeypots","year":"2023","author":"Tang","key":"ref12"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref14","first-page":"38 013","article-title":"Umd: Unsupervised model detection for x2x backdoor attacks","volume-title":"International Conference on Machine Learning","author":"Xiang"},{"journal-title":"Universal post-training backdoor detection","year":"2022","author":"Wang","key":"ref15"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_13"},{"journal-title":"Adversarial unlearning of backdoors via implicit hypergradient","year":"2021","author":"Zeng","key":"ref17"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/iccv51070.2023.00433"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23415"},{"journal-title":"Targeted backdoor attacks on deep learning systems using data poisoning","year":"2017","author":"Chen","key":"ref20"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00034"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01465"},{"journal-title":"Backdoor attack in the physical world","year":"2021","author":"Li","key":"ref23"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2022.3201472"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3055844"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01570"},{"journal-title":"Scale-up: An efficient black-box input-level backdoor detection via analyzing scaled prediction consistency","year":"2023","author":"Guo","key":"ref27"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2020.2978386"},{"key":"ref29","first-page":"582","article-title":"Support vector method for novelty detection","volume-title":"Proceedings of the 13th International Conference on Neural Information Processing Systems","author":"Sch\u00f6lkopf"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1023\/B:MACH.0000008084.60811.49"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3439950"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1016\/j.sigpro.2013.12.026"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359790"},{"journal-title":"Ibd-psc: Input-level backdoor detection via parameter-oriented scaling consistency","year":"2024","author":"Hou","key":"ref34"}],"event":{"name":"2025 International Joint Conference on Neural Networks (IJCNN)","start":{"date-parts":[[2025,6,30]]},"location":"Rome, Italy","end":{"date-parts":[[2025,7,5]]}},"container-title":["2025 International Joint Conference on Neural Networks (IJCNN)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11227166\/11227148\/11227936.pdf?arnumber=11227936","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,15]],"date-time":"2025-11-15T07:25:59Z","timestamp":1763191559000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11227936\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,30]]},"references-count":34,"URL":"https:\/\/doi.org\/10.1109\/ijcnn64981.2025.11227936","relation":{},"subject":[],"published":{"date-parts":[[2025,6,30]]}}}