{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,2]],"date-time":"2026-01-02T05:48:13Z","timestamp":1767332893818,"version":"3.48.0"},"reference-count":37,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,10,6]],"date-time":"2025-10-06T00:00:00Z","timestamp":1759708800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,10,6]],"date-time":"2025-10-06T00:00:00Z","timestamp":1759708800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100006754","name":"Army Research Laboratory","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100006754","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,10,6]]},"DOI":"10.1109\/milcom64451.2025.11310745","type":"proceedings-article","created":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T18:35:33Z","timestamp":1767292533000},"page":"1-6","source":"Crossref","is-referenced-by-count":0,"title":["Model-agnostic clean-label backdoor mitigation in cybersecurity environments"],"prefix":"10.1109","author":[{"given":"Giorgio","family":"Severi","sequence":"first","affiliation":[{"name":"Northeastern University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Simona","family":"Boboila","sequence":"additional","affiliation":[{"name":"Northeastern University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"John","family":"Holodnak","sequence":"additional","affiliation":[{"name":"MIT Lincoln Laboratory"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kendra","family":"Kratkiewicz","sequence":"additional","affiliation":[{"name":"MIT Lincoln Laboratory"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Rauf","family":"Izmailov","sequence":"additional","affiliation":[{"name":"Peraton Labs"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Michael J.","family":"De Lucia","sequence":"additional","affiliation":[{"name":"DEVCOM Army Research Laboratory"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alina","family":"Oprea","sequence":"additional","affiliation":[{"name":"Northeastern University"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","first-page":"27","article-title":"Detecting malware domains at the upper DNS hierarchy","volume-title":"Proceedings of the 20th USENIX Conference on Security, ser. SEC\u201911","author":"Antonakakis"},{"doi-asserted-by":"publisher","key":"ref2","DOI":"10.1145\/3274694.3274710"},{"doi-asserted-by":"publisher","key":"ref3","DOI":"10.14722\/ndss.2018.23204"},{"doi-asserted-by":"publisher","key":"ref4","DOI":"10.1109\/SP54263.2024.00179"},{"doi-asserted-by":"publisher","key":"ref5","DOI":"10.1109\/SPW50608.2020.00028"},{"volume-title":"VirusTotal Poisoning 2020","year":"1999","key":"ref6"},{"doi-asserted-by":"publisher","key":"ref7","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"ref8","first-page":"1487","article-title":"Explanation-Guided Backdoor Poisoning Attacks Against Malware Classifiers","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Severi"},{"doi-asserted-by":"publisher","key":"ref9","DOI":"10.1109\/SP46215.2023.10179347"},{"doi-asserted-by":"publisher","key":"ref10","DOI":"10.1145\/3627106.3627123"},{"key":"ref11","article-title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","author":"Shafahi","year":"2018","journal-title":"Advances in Neural Information Processing Systems"},{"year":"2019","author":"Turner","article-title":"Label-consistent backdoor attacks","key":"ref12"},{"doi-asserted-by":"publisher","key":"ref13","DOI":"10.1109\/ICDMW58026.2022.00080"},{"doi-asserted-by":"publisher","key":"ref14","DOI":"10.1109\/ICC.2018.8422328"},{"key":"ref15","first-page":"3520","article-title":"Certified defenses for data poisoning attacks","volume-title":"Proceedings of the 31st International Conference on Neural Information Processing Systems, ser. NIPS\u201917","author":"Steinhardt"},{"volume-title":"9th International Conference on Learning Representations, ICLR 2021, Virtual Event, Austria, May 3-7, 2021","author":"Levine","article-title":"Deep partition aggregation: Provable defenses against general poisoning attacks","key":"ref16"},{"volume-title":"CVPR 2020 Workshop on Adversarial Machine Learning in Computer Vision","author":"Wang","article-title":"n certifying robustness against backdoor attacks via randomized smoothing","key":"ref17"},{"volume-title":"Workshop on Artificial Intelligence Safety","author":"Chen","article-title":"Detecting backdoor attacks on deep neural networks by activation clustering","key":"ref18"},{"key":"ref19","article-title":"Spectral signatures in backdoor attacks","author":"Tran","year":"2018","journal-title":"Neural Information Processing Systems"},{"doi-asserted-by":"publisher","key":"ref20","DOI":"10.5040\/9781350250307-0201"},{"doi-asserted-by":"publisher","key":"ref21","DOI":"10.1007\/978-3-030-00470-5_13"},{"doi-asserted-by":"publisher","key":"ref22","DOI":"10.1109\/SP46215.2023.10351028"},{"key":"ref23","article-title":"Anti-backdoor learning: Training clean models on poisoned data","author":"Li","year":"2021","journal-title":"Advances in Neural Information Processing Systems"},{"volume-title":"ICLR","author":"Huang","article-title":"Backdoor defense via decoupling the training process","key":"ref24"},{"key":"ref25","first-page":"9727","article-title":"Effective Backdoor Defense by Exploiting Sensitivity of Poisoned Samples","volume":"35","author":"Chen","year":"2022","journal-title":"Advances in Neural Information Processing Systems"},{"doi-asserted-by":"publisher","key":"ref26","DOI":"10.1145\/3319535.3363216"},{"doi-asserted-by":"publisher","key":"ref27","DOI":"10.1109\/SP40001.2021.00034"},{"doi-asserted-by":"publisher","key":"ref28","DOI":"10.1109\/SP.2019.00031"},{"doi-asserted-by":"publisher","key":"ref29","DOI":"10.1109\/SP54263.2024.00174"},{"doi-asserted-by":"publisher","key":"ref30","DOI":"10.1109\/MILCOM52596.2021.9652916"},{"doi-asserted-by":"publisher","key":"ref31","DOI":"10.1109\/MILCOM55135.2022.10017768"},{"year":"2018","author":"Anderson","article-title":"Ember: an open dataset for training static pe malware machine learning models","key":"ref32"},{"key":"ref33","first-page":"1685","article-title":"Towards a proactive ML approach for detecting backdoor poison samples","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Qi"},{"doi-asserted-by":"publisher","key":"ref34","DOI":"10.1145\/304181.304187"},{"doi-asserted-by":"publisher","key":"ref35","DOI":"10.1016\/j.cose.2014.05.011"},{"doi-asserted-by":"publisher","key":"ref36","DOI":"10.1109\/CNS53000.2021.9705045"},{"doi-asserted-by":"publisher","key":"ref37","DOI":"10.3321\/j.issn:0529-6579.2007.z1.029"}],"event":{"name":"MILCOM 2025 - 2025 IEEE Military Communications Conference (MILCOM)","start":{"date-parts":[[2025,10,6]]},"location":"Los Angeles, CA, USA","end":{"date-parts":[[2025,10,10]]}},"container-title":["MILCOM 2025 - 2025 IEEE Military Communications Conference (MILCOM)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11309822\/11309347\/11310745.pdf?arnumber=11310745","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,2]],"date-time":"2026-01-02T05:46:19Z","timestamp":1767332779000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11310745\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,6]]},"references-count":37,"URL":"https:\/\/doi.org\/10.1109\/milcom64451.2025.11310745","relation":{},"subject":[],"published":{"date-parts":[[2025,10,6]]}}}