{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,18]],"date-time":"2026-03-18T13:25:16Z","timestamp":1773840316801,"version":"3.50.1"},"reference-count":35,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"8","license":[{"start":{"date-parts":[[2022,8,1]],"date-time":"2022-08-01T00:00:00Z","timestamp":1659312000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,8,1]],"date-time":"2022-08-01T00:00:00Z","timestamp":1659312000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,8,1]],"date-time":"2022-08-01T00:00:00Z","timestamp":1659312000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Nature Science Foundation of China","doi-asserted-by":"publisher","award":["62072076"],"award-info":[{"award-number":["62072076"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Comput.-Aided Des. Integr. Circuits Syst."],"published-print":{"date-parts":[[2022,8]]},"DOI":"10.1109\/tcad.2021.3111123","type":"journal-article","created":{"date-parts":[[2021,9,8]],"date-time":"2021-09-08T20:10:40Z","timestamp":1631131840000},"page":"2611-2624","source":"Crossref","is-referenced-by-count":20,"title":["Interpretability-Guided Defense Against Backdoor Attacks to Deep Neural Networks"],"prefix":"10.1109","volume":"41","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6181-3900","authenticated-orcid":false,"given":"Wei","family":"Jiang","sequence":"first","affiliation":[{"name":"School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7327-7786","authenticated-orcid":false,"given":"Xiangyu","family":"Wen","sequence":"additional","affiliation":[{"name":"School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0214-7124","authenticated-orcid":false,"given":"Jinyu","family":"Zhan","sequence":"additional","affiliation":[{"name":"School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xupeng","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1782-0227","authenticated-orcid":false,"given":"Ziwei","family":"Song","sequence":"additional","affiliation":[{"name":"School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3287624.3287645"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.33013412"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00119"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD.2017.8203882"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3233231"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/MCE.2020.2969150"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i01.5459"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.5555\/3241094.3241142"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00509"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243757"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ICCD.2017.16"},{"key":"ref12","volume-title":"Targeted backdoor attacks on deep learning systems using data poisoning","author":"Chen","year":"2017"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23291"},{"key":"ref14","volume-title":"Programmable neural network trojan for pre-trained feature extractor","author":"Ji","year":"2019"},{"key":"ref15","first-page":"66","article-title":"Detecting backdoor attacks on deep neural networks by activation clustering","volume-title":"Proc. AAAI Workshop Artif. Intell. Safety","author":"Chen"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363216"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58592-1_14"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359790"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/2046684.2046692"},{"key":"ref22","volume-title":"BadNets: Identifying vulnerabilities in the machine learning model supply chain","author":"Gu","year":"2017"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/SPW50608.2020.00025"},{"key":"ref25","volume-title":"TABOR: A highly accurate approach to inspecting and restoring trojan backdoors in AI systems","author":"Guo","year":"2019"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/1390156.1390294"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00928"},{"key":"ref28","article-title":"Very deep convolutional networks for large-scale image recognition","volume-title":"Proc. ICLR","author":"Simonyan"},{"key":"ref29","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ICVGIP.2008.47"},{"key":"ref32","volume-title":"An overview of gradient descent optimization algorithms","author":"Ruder","year":"2016"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.2307\/2332329"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref35","article-title":"Pruning filters for efficient ConvNets","volume-title":"Proc. ICLR","author":"Li"}],"container-title":["IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/43\/9832686\/09530722.pdf?arnumber=9530722","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,11]],"date-time":"2024-01-11T23:33:48Z","timestamp":1705016028000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9530722\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,8]]},"references-count":35,"journal-issue":{"issue":"8"},"URL":"https:\/\/doi.org\/10.1109\/tcad.2021.3111123","relation":{},"ISSN":["0278-0070","1937-4151"],"issn-type":[{"value":"0278-0070","type":"print"},{"value":"1937-4151","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,8]]}}}