{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,17]],"date-time":"2025-09-17T16:44:32Z","timestamp":1758127472626,"version":"3.37.3"},"reference-count":49,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2021,6,1]],"date-time":"2021-06-01T00:00:00Z","timestamp":1622505600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,6,1]],"date-time":"2021-06-01T00:00:00Z","timestamp":1622505600000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,6,1]],"date-time":"2021-06-01T00:00:00Z","timestamp":1622505600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,6,1]],"date-time":"2021-06-01T00:00:00Z","timestamp":1622505600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000006","name":"Office of Naval Research","doi-asserted-by":"publisher","award":["N00014-18-1-2058"],"award-info":[{"award-number":["N00014-18-1-2058"]}],"id":[{"id":"10.13039\/100000006","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000006","name":"Office of Naval Research","doi-asserted-by":"publisher","award":["N00014-18-1-2058"],"award-info":[{"award-number":["N00014-18-1-2058"]}],"id":[{"id":"10.13039\/100000006","id-type":"DOI","asserted-by":"publisher"}]},{"name":"NYU\/NYUAD Center for Cyber Security"},{"DOI":"10.13039\/100000001","name":"National Science Foundation CAREER Award","doi-asserted-by":"publisher","award":["1553419"],"award-info":[{"award-number":["1553419"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["1801495"],"award-info":[{"award-number":["1801495"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Comput.-Aided Des. Integr. Circuits Syst."],"published-print":{"date-parts":[[2021,6]]},"DOI":"10.1109\/tcad.2020.3024780","type":"journal-article","created":{"date-parts":[[2020,9,18]],"date-time":"2020-09-18T20:21:35Z","timestamp":1600460495000},"page":"1244-1257","source":"Crossref","is-referenced-by-count":5,"title":["Training Data Poisoning in ML-CAD: Backdooring DL-Based Lithographic Hotspot Detectors"],"prefix":"10.1109","volume":"40","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7231-8315","authenticated-orcid":false,"given":"Kang","family":"Liu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7642-3638","authenticated-orcid":false,"given":"Benjamin","family":"Tan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7989-5617","authenticated-orcid":false,"given":"Ramesh","family":"Karri","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6158-9512","authenticated-orcid":false,"given":"Siddharth","family":"Garg","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","first-page":"1","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2015","journal-title":"Proc 3rd Int Conf Learn Represent (ICLR)"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/ICCD.2017.16"},{"journal-title":"Keras","year":"2015","author":"chollet","key":"ref33"},{"journal-title":"Calibre-LFD","year":"2019","key":"ref32"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/VTS.2018.8368646"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/2429384.2429457"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/1128817.1128824"},{"key":"ref35","first-page":"242","article-title":"Sparse DNNs with improved adversarial robustness","author":"guo","year":"2018","journal-title":"Advances in neural information processing systems"},{"key":"ref34","first-page":"2579","article-title":"Visualizing data using t-SNE","volume":"9","author":"maaten","year":"2008","journal-title":"J Mach Learn Res"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/2228360.2228576"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46493-0_32"},{"journal-title":"FreePDK45 Contents—NCSU EDA Wiki","year":"2019","key":"ref29"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3177540.3177554"},{"journal-title":"DARPA picks its first set of winners in electronics resurgence initiative","year":"2018","author":"moore","key":"ref1"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref21","first-page":"14004","article-title":"Defending neural backdoors via generative distribution modeling","author":"qiao","year":"2019","journal-title":"Advances in Neural IInformation Processing Systems"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"journal-title":"NNoculation Broad spectrum and targeted treatment of backdoored DNNs","year":"2020","author":"veldanda","key":"ref23"},{"key":"ref26","first-page":"4107","article-title":"Binarized neural networks","author":"hubara","year":"2016","journal-title":"Advances in neural information processing systems"},{"key":"ref25","first-page":"1","article-title":"To prune, or not to prune: Exploring the efficacy of pruning for model compression","author":"zhu","year":"2018","journal-title":"Proc Int Conf Learn Represent Workshop Track"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2018.07.023"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.17"},{"key":"ref12","first-page":"6103","article-title":"Poison frogs! targeted clean-label poisoning attacks on neural networks","author":"shafahi","year":"2018","journal-title":"Advances in neural information processing systems"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3408288"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.23919\/DATE48585.2020.9116489"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3315574"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/DSD.2018.00076"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.2200\/S00861ED1V01Y201806AIM039"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3359786"},{"key":"ref19","first-page":"1","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2014","journal-title":"Proc 2nd Int Conf Learn Represent (ICLR)"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3316781.3317811"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2018.2837078"},{"key":"ref6","article-title":"A new lithography hotspot detection framework based on adaboost classifier and simplified feature extraction","volume":"9427","author":"matsunawa","year":"2015","journal-title":"Proc Design Process Technol Co-Optim Manuf IX"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3372044"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.23919\/DATE.2019.8715126"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2966986.2967032"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/3240765.3240843"},{"key":"ref9","first-page":"1","article-title":"Developing synthesis flows without human knowledge","author":"yu","year":"2018","journal-title":"Proc 55th Annu Design Autom Conf"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3287624.3287685"},{"journal-title":"1st ACM\/IEEE Workshop on Machine Learning for CAD (MLCAD)","year":"2020","key":"ref45"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2019.2917130"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3316781.3317852"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363216"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3240765.3264699"},{"key":"ref43","first-page":"1","article-title":"Ensemble adversarial training: Attacks and defenses","author":"tram\u00e8r","year":"2018","journal-title":"Proc Int Conf Learn Represent"}],"container-title":["IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/43\/9437244\/9200729-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/43\/9437244\/09200729.pdf?arnumber=9200729","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,10]],"date-time":"2022-05-10T14:49:30Z","timestamp":1652194170000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9200729\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,6]]},"references-count":49,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/tcad.2020.3024780","relation":{},"ISSN":["0278-0070","1937-4151"],"issn-type":[{"type":"print","value":"0278-0070"},{"type":"electronic","value":"1937-4151"}],"subject":[],"published":{"date-parts":[[2021,6]]}}}