{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,29]],"date-time":"2026-07-29T14:53:26Z","timestamp":1785336806293,"version":"3.55.0"},"reference-count":30,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,5,2]],"date-time":"2022-05-02T00:00:00Z","timestamp":1651449600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,5,2]],"date-time":"2022-05-02T00:00:00Z","timestamp":1651449600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003392","name":"Natural Science Foundation of Fujian Province","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100003392","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100005320","name":"Xidian University","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100005320","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,5,2]]},"DOI":"10.1109\/infocom48880.2022.9796974","type":"proceedings-article","created":{"date-parts":[[2022,6,20]],"date-time":"2022-06-20T21:18:49Z","timestamp":1655759929000},"page":"280-289","source":"Crossref","is-referenced-by-count":84,"title":["Backdoor Defense with Machine Unlearning"],"prefix":"10.1109","author":[{"given":"Yang","family":"Liu","sequence":"first","affiliation":[{"name":"State Key Laboratory of Integrated Services Networks (ISN)"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mingyuan","family":"Fan","sequence":"additional","affiliation":[{"name":"Fuzhou University,College of Computer and Data Science,Fuzhou,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Cen","family":"Chen","sequence":"additional","affiliation":[{"name":"East China Normal University,School of Data Science and Engineering,Shanghai,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ximeng","family":"Liu","sequence":"additional","affiliation":[{"name":"Fuzhou University,College of Computer and Data Science,Fuzhou,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhuo","family":"Ma","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Integrated Services Networks (ISN)"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Li","family":"Wang","sequence":"additional","affiliation":[{"name":"Ant Group,Hangzhou,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jianfeng","family":"Ma","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Integrated Services Networks (ISN)"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417253"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.35"},{"key":"ref12","first-page":"931","article-title":"Descent-to-delete: Gradient-based methods for machine unlearning","author":"neel","year":"2021","journal-title":"Algorithmic Learning Theory"},{"key":"ref13","article-title":"Learn to forget: Memorization elimination for neural networks","author":"liu","year":"2020"},{"key":"ref14","article-title":"Defending neural backdoors via generative distribution modeling","author":"qiao","year":"2019","journal-title":"NeurIPS"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3394171.3413546"},{"key":"ref16","article-title":"Mine: mutual information neural estimation","author":"belghazi","year":"2018","journal-title":"Proceedings of International Conference on Machine Learning"},{"key":"ref17","article-title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","author":"gu","year":"2017"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3021407"},{"key":"ref19","first-page":"173","article-title":"Invisible poisoning: Highly stealthy targeted poisoning attack","author":"chen","year":"2019","journal-title":"International Conference on Information Security and Cryptology"},{"key":"ref28","article-title":"Neural attention distillation: Erasing backdoor triggers from deep neural networks","author":"li","year":"2021"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/647"},{"key":"ref27","doi-asserted-by":"crossref","first-page":"273","DOI":"10.1007\/978-3-030-00470-5_13","article-title":"Fine-pruning: Defending against backdooring attacks on deep neural networks","author":"liu","year":"2018","journal-title":"International Symposium on Research in Attacks Intrusions and Defenses"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359790"},{"key":"ref6","doi-asserted-by":"crossref","first-page":"273","DOI":"10.1007\/978-3-030-00470-5_13","article-title":"Fine-pruning: Defending against backdooring attacks on deep neural networks","author":"liu","year":"2018","journal-title":"International Symposium on Research in Attacks Intrusions and Defenses"},{"key":"ref29","article-title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","author":"gu","year":"2017"},{"key":"ref5","first-page":"326","article-title":"One-pixel signature: Character-izing cnn models for backdoor detection","author":"huang","year":"2020","journal-title":"European Conference on Computer Vision"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58592-1_14"},{"key":"ref7","article-title":"Neural attention distillation: Erasing backdoor triggers from deep neural networks","author":"li","year":"2021","journal-title":"International Conference on Learning Representations"},{"key":"ref2","article-title":"Spectral signatures in backdoor attacks","author":"tran","year":"2018","journal-title":"Advances in neural information processing systems"},{"key":"ref9","article-title":"Trojaning attack on neural networks","author":"liu","year":"2017"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3374664.3375751"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00038"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/SPW50608.2020.00025"},{"key":"ref21","article-title":"Robust anomaly detection and backdoor attack detection via differential privacy","author":"du","year":"2019"},{"key":"ref24","article-title":"Graph unlearning","author":"chen","year":"2021"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00019"},{"key":"ref26","first-page":"877","article-title":"Towards robust lidar-based perception in autonomous driving: General black-box adversarial sensor attack and countermeasures","author":"sun","year":"2020","journal-title":"29th USENIX Security Symposium USENIX Security 20"},{"key":"ref25","article-title":"Revocable federated learning: A benchmark of federated forest","author":"liu","year":"2019"}],"event":{"name":"IEEE INFOCOM 2022 - IEEE Conference on Computer Communications","location":"London, United Kingdom","start":{"date-parts":[[2022,5,2]]},"end":{"date-parts":[[2022,5,5]]}},"container-title":["IEEE INFOCOM 2022 - IEEE Conference on Computer Communications"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9796607\/9796652\/09796974.pdf?arnumber=9796974","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,18]],"date-time":"2022-07-18T20:46:20Z","timestamp":1658177180000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9796974\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,5,2]]},"references-count":30,"URL":"https:\/\/doi.org\/10.1109\/infocom48880.2022.9796974","relation":{},"subject":[],"published":{"date-parts":[[2022,5,2]]}}}