{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,11]],"date-time":"2026-06-11T16:25:57Z","timestamp":1781195157719,"version":"3.54.1"},"reference-count":58,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U19B2044"],"award-info":[{"award-number":["U19B2044"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61836011"],"award-info":[{"award-number":["61836011"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2023,3,1]]},"DOI":"10.1109\/tdsc.2022.3161477","type":"journal-article","created":{"date-parts":[[2022,3,28]],"date-time":"2022-03-28T20:53:05Z","timestamp":1648500785000},"page":"1675-1686","source":"Crossref","is-referenced-by-count":25,"title":["Enhancing Backdoor Attacks With Multi-Level MMD Regularization"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8268-2057","authenticated-orcid":false,"given":"Pengfei","family":"Xia","sequence":"first","affiliation":[{"name":"Department of Electronic Engineering and Information Science, University of Science and Technology of China, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9480-6464","authenticated-orcid":false,"given":"Hongjing","family":"Niu","sequence":"additional","affiliation":[{"name":"Department of Automation, University of Science and Technology of China, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9484-2310","authenticated-orcid":false,"given":"Ziqiang","family":"Li","sequence":"additional","affiliation":[{"name":"Department of Electronic Engineering and Information Science, University of Science and Technology of China, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2332-3959","authenticated-orcid":false,"given":"Bin","family":"Li","sequence":"additional","affiliation":[{"name":"Department of Electronic Engineering and Information Science, University of Science and Technology of China, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.169"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298965"},{"key":"ref3","article-title":"YOLOv3: An incremental improvement","author":"Redmon","year":"2018"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/s11063-019-10047-3"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-020-09110-2"},{"key":"ref6","article-title":"Sequence to sequence learning with neural networks","author":"Sutskever","year":"2014"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/p17-1152"},{"key":"ref8","article-title":"BERT: Pre-training of deep bidirectional transformers for language understanding","author":"Devlin","year":"2018"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2016.7472621"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1038\/nature16961"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1038\/s41586-021-03819-2"},{"key":"ref12","first-page":"1877","article-title":"Language models are few-shot learners","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Brown"},{"key":"ref13","article-title":"Detecting backdoor attacks on deep neural networks by activation clustering","author":"Chen"},{"key":"ref14","first-page":"8011","article-title":"Spectral signatures in backdoor attacks","volume-title":"Proc. 32nd Int. Conf. Neural Inf. Process. Syst.","author":"Tran"},{"key":"ref15","article-title":"Targeted backdoor attacks on deep learning systems using data poisoning","author":"Chen","year":"2017"},{"key":"ref16","article-title":"BadNets: Identifying vulnerabilities in the machine learning model supply chain","author":"Gu","year":"2017"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23291"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3028448"},{"key":"ref19","article-title":"A unified framework for analyzing and detecting malicious examples of DNN models","author":"Jin","year":"2020"},{"key":"ref20","article-title":"SPECTRE: Defending against backdoor attacks using robust statistics","author":"Hayase","year":"2021"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP48549.2020.00019"},{"key":"ref22","article-title":"Backdoor attack with imperceptible input and latent modification","volume-title":"Proc. 35th Int. Conf. Neural Inf. Process. Syst.","author":"Doan"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP42928.2021.9506313"},{"issue":"1","key":"ref24","first-page":"723","article-title":"A kernel two-sample test","volume":"13","author":"Gretton","year":"2012","journal-title":"J. Mach. Learn. Res."},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1016\/j.jspi.2013.03.018"},{"key":"ref26","article-title":"Generalized sliced wasserstein distances","volume-title":"Proc. 33rd Int. Conf. Neural Inf. Process. Syst.","author":"Kolouri"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2019.8802997"},{"key":"ref28","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-540-71050-9","volume-title":"Optimal Transport: Old and New","volume":"338","author":"Villani","year":"2009"},{"key":"ref29","article-title":"Wanet\u2013imperceptible warping-based backdoor attack","author":"Nguyen","year":"2021"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.425"},{"key":"ref31","first-page":"1","article-title":"CLEANN: Accelerated trojan shield for embedded neural networks","volume-title":"Proc. IEEE\/ACM Int. Conf. Comput. Aided Des.","author":"Javaheripi"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref33","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP53844.2022.00049"},{"key":"ref35","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2014"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46493-0_38"},{"key":"ref38","first-page":"8024","article-title":"PyTorch: An imperative style, high-performance deep learning library","author":"Paszke","year":"2019","journal-title":"Proc. Adv. Neural Inform. Process. Syst. 32nd Annu. Conf. Neural Inf. Process. Syst."},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3374664.3375751"},{"key":"ref40","article-title":"Label-consistent backdoor attacks","author":"Turner","year":"2019"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3021407"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/ICCD.2017.16"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58607-2_11"},{"key":"ref44","article-title":"Rethinking the trigger of backdoor attack","author":"Li","year":"2020"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/IJCB48548.2020.9304875"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.acl-main.249"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01321"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3394486.3403064"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/TSC.2020.3000900"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2021.3082002"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/647"},{"key":"ref52","article-title":"Neural attention distillation: Erasing backdoor triggers from deep neural networks","author":"Li","year":"2021"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00034"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00038"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/SPW50608.2020.00025"},{"key":"ref57","article-title":"Exposing backdoors in robust machine learning models","author":"Soremekun","year":"2020"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.74"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/10068314\/09743735.pdf?arnumber=9743735","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,18]],"date-time":"2024-01-18T00:08:47Z","timestamp":1705536527000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9743735\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,3,1]]},"references-count":58,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2022.3161477","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,3,1]]}}}