{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,31]],"date-time":"2026-01-31T05:42:39Z","timestamp":1769838159654,"version":"3.49.0"},"reference-count":42,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"9","license":[{"start":{"date-parts":[[2024,9,1]],"date-time":"2024-09-01T00:00:00Z","timestamp":1725148800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,9,1]],"date-time":"2024-09-01T00:00:00Z","timestamp":1725148800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,9,1]],"date-time":"2024-09-01T00:00:00Z","timestamp":1725148800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Nature Science Foundation of China","doi-asserted-by":"publisher","award":["62072076"],"award-info":[{"award-number":["62072076"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Nature Science Foundation of China","doi-asserted-by":"publisher","award":["62372087"],"award-info":[{"award-number":["62372087"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Research Fund of State Key Laboratory of Processors","award":["CLQ202310"],"award-info":[{"award-number":["CLQ202310"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Comput."],"published-print":{"date-parts":[[2024,9]]},"DOI":"10.1109\/tc.2024.3416705","type":"journal-article","created":{"date-parts":[[2024,6,19]],"date-time":"2024-06-19T17:24:33Z","timestamp":1718817873000},"page":"2350-2363","source":"Crossref","is-referenced-by-count":2,"title":["Highly Evasive Targeted Bit-Trojan on Deep Neural Networks"],"prefix":"10.1109","volume":"73","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4120-5841","authenticated-orcid":false,"given":"Lingxin","family":"Jin","sequence":"first","affiliation":[{"name":"School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6181-3900","authenticated-orcid":false,"given":"Wei","family":"Jiang","sequence":"additional","affiliation":[{"name":"School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0214-7124","authenticated-orcid":false,"given":"Jinyu","family":"Zhan","sequence":"additional","affiliation":[{"name":"School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7327-7786","authenticated-orcid":false,"given":"Xiangyu","family":"Wen","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, The Chinese University of Hong Kong, Hong Kong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01042"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.322"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.03762"},{"key":"ref4","article-title":"Language models are unsupervised multitask learners","volume-title":"OpenAI Blog","author":"Radford","year":"2019"},{"key":"ref5","article-title":"Intriguing properties of neural networks","volume-title":"Proc. Int. Conf. Learn. Representations (Poster)","author":"Szegedy","year":"2014"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.17"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24525"},{"key":"ref8","first-page":"1577","article-title":"Poisoning the unlabeled dataset of semi-supervised learning","volume-title":"Proc. USENIX Secur. Symp.","author":"Carlini","year":"2021"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243757"},{"key":"ref10","article-title":"MIRROR: Model inversion for deep learningnetwork with high fidelity","volume-title":"Proc. Netw. Distrib. Syst. Secur. (NDSS) Symp.","author":"Tao","year":"2022"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23291"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ISCA.2014.6853210"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978406"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2021.3129114"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01321"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00762"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00130"},{"key":"ref19","first-page":"497","article-title":"Terminal brain damage: Exposing the graceless degradation in deep neural networks under hardware fault attacks","volume-title":"Proc. USENIX Secur. Symp.","author":"Hong","year":"2019"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2023.3266592"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2022.3222090"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2021.3112932"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-20065-6_7"},{"key":"ref24","article-title":"An image is worth 16x16 words: Transformers for image recognition at scale","volume-title":"Int. Conf. Learn. Representations (ICLR)","author":"Dosovitskiy","year":"2021"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00392"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.5555\/3241094.3241142"},{"key":"ref27","article-title":"Model Zoo","author":"Koh","year":"2018"},{"key":"ref28","first-page":"19","article-title":"One bit flips, one cloud flops: Cross-VM row hammer attacks and privilege escalation","volume-title":"Proc. USENIX Secur. Symp.","author":"Yuan","year":"2016"},{"key":"ref29","first-page":"987","article-title":"Dedup est machina: Memory deduplication as an advanced exploitation vector","volume-title":"Proc. IEEE Symp. Secur. Privacy (SP)","author":"Erik","year":"2016"},{"key":"ref30","first-page":"1","article-title":"Flip feng shui: Hammering a needle in the software stack","volume-title":"Proc. USENIX Secur. Symp.","author":"Kaveh","year":"2016"},{"key":"ref31","article-title":"Maximal Jacobian-based saliency map attack","author":"Wiyatno","year":"2018"},{"key":"ref32","article-title":"Deep inside convolutional networks: Visualising image classification models and saliency maps","volume-title":"Proc. Int. Conf. Learn. Representations (Workshop Poster)","author":"Karen","year":"2014"},{"key":"ref33","article-title":"Detecting backdoor attacks on deep neural networks by activation clustering","volume-title":"Proc. Assoc. Adv. Artif. Intell. (AAAI)","volume":"2301","author":"Chen","year":"2019"},{"key":"ref34","first-page":"10347","article-title":"Training data-efficient image transformers & distillation through attention","volume-title":"Proc. Int. Conf. Mach. Learn. (ICML)","volume":"139","author":"Touvron","year":"2021"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ICME55011.2023.00479"},{"key":"ref36","article-title":"Backdoor attacks on vision transformers","author":"Subramanya","year":"2022"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i1.25125"},{"key":"ref38","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. Int. Conf. Learn. Representations (Poster)","author":"Goodfellow","year":"2015"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.23069"},{"key":"ref40","first-page":"8491","article-title":"Detecting out-of-distribution examples with gram matrices","volume-title":"Proc. Int. Conf. Mach. Learn. (ICML)","volume":"119","author":"Sastry","year":"2020"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2023.02.026"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2018.12.002"}],"container-title":["IEEE Transactions on Computers"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/12\/10631806\/10564839.pdf?arnumber=10564839","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,8,11]],"date-time":"2024-08-11T04:58:17Z","timestamp":1723352297000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10564839\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,9]]},"references-count":42,"journal-issue":{"issue":"9"},"URL":"https:\/\/doi.org\/10.1109\/tc.2024.3416705","relation":{},"ISSN":["0018-9340","1557-9956","2326-3814"],"issn-type":[{"value":"0018-9340","type":"print"},{"value":"1557-9956","type":"electronic"},{"value":"2326-3814","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,9]]}}}