{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T16:25:00Z","timestamp":1783787100182,"version":"3.55.0"},"reference-count":56,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100008982","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-2046335"],"award-info":[{"award-number":["CNS-2046335"]}],"id":[{"id":"10.13039\/501100008982","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100008982","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-2034870"],"award-info":[{"award-number":["CNS-2034870"]}],"id":[{"id":"10.13039\/501100008982","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2023,3,1]]},"DOI":"10.1109\/tdsc.2022.3163397","type":"journal-article","created":{"date-parts":[[2022,3,30]],"date-time":"2022-03-30T19:53:08Z","timestamp":1648669988000},"page":"1730-1743","source":"Crossref","is-referenced-by-count":13,"title":["Stealthy 3D Poisoning Attack on Video Recognition Models"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7484-6314","authenticated-orcid":false,"given":"Shangyu","family":"Xie","sequence":"first","affiliation":[{"name":"Department of Computer Science, Illinois Institute of Technology, Chicago, IL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yan","family":"Yan","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Illinois Institute of Technology, Chicago, IL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4095-4506","authenticated-orcid":false,"given":"Yuan","family":"Hong","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Illinois Institute of Technology, Chicago, IL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","first-page":"739","article-title":"Off-road obstacle avoidance through end-to-end learning","volume-title":"Proc. 18th Int. Conf. Neural Inf. Process. Syst.","author":"Muller"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.510"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00678"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40994-3_25"},{"key":"ref5","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Goodfellow"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref8","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3345660"},{"key":"ref10","first-page":"461","article-title":"CT-GAN: Malicious tampering of 3D medical imagery using deep learning","volume-title":"Proc. 28th USENIX Conf. Secur.","author":"Mirsky"},{"key":"ref11","article-title":"Targeted backdoor attacks on deep learning systems using data poisoning","author":"Chen","year":"2017"},{"key":"ref12","first-page":"6106","article-title":"Poison frogs! targeted clean-label poisoning attacks on neural networks","volume-title":"Proc. 18th Int. Conf. Neural Inf. Process. Syst.","author":"Shafahi"},{"key":"ref13","article-title":"Poisoning attacks against support vector machines","author":"Biggio","year":"2012"},{"key":"ref14","first-page":"1299","article-title":"When does machine learning FAIL? Generalized transferability for evasion and poisoning attacks","volume-title":"Proc. 27th USENIX Conf. Secur. Symp. Secur.","author":"Suciu"},{"key":"ref15","first-page":"7614","article-title":"Transferable clean-label poisoning attacks on deep neural nets","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Zhu"},{"key":"ref16","article-title":"Cleanlabel backdoor attacks","author":"Turner","year":"2018"},{"key":"ref17","article-title":"BadNets: Identifying vulnerabilities in the machine learning model supply chain","author":"Gu","year":"2017"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6871"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01445"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00407"},{"key":"ref21","first-page":"3520","article-title":"Certified defenses for data poisoning attacks","volume-title":"Proc. 18th Int. Conf. Neural Inf. Process. Syst.","author":"Steinhardt"},{"key":"ref22","first-page":"8000","article-title":"Spectral signatures in backdoor attacks","volume-title":"Proc. 18th Int. Conf. Neural Inf. Process. Syst.","author":"Tran"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.502"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00718"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00028"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00565"},{"key":"ref29","article-title":"UCF101: A dataset of 101 human actions classes from videos in the wild","author":"Soomro","year":"2012"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2011.6126543"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01424-7_27"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/566654.566636"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1111\/j.1467-8659.2010.01827.x"},{"key":"ref34","article-title":"Convex polyhedron learning and its applications","author":"Tak\u00e1cs","year":"2009"},{"key":"ref35","article-title":"Polytopes and machine learning","author":"Bao","year":"2021"},{"key":"ref36","first-page":"5286","article-title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Wong"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3338501.3357372"},{"key":"ref38","article-title":"How transferable are features in deep neural networks?","author":"Yosinski","year":"2014"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00723"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TVCG.2017.2744359"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.17"},{"key":"ref42","article-title":"A field guide to forward-backward splitting with a fasta implementation","author":"Goldstein","year":"2014"},{"key":"ref43","article-title":"Adam: A method for stochastic optimization","author":"Kingma","year":"2014"},{"key":"ref44","article-title":"The kinetics human action video dataset","author":"Kay","year":"2017"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2003.819861"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.179"},{"key":"ref47","first-page":"1633","article-title":"On adaptive attacks to adversarial example defenses","volume-title":"Proc. 18th Int. Conf. Neural Inf. Process. Syst.","author":"Tramer"},{"key":"ref48","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref49","article-title":"Certified defenses against adversarial examples","author":"Raghunathan","year":"2018"},{"key":"ref50","first-page":"1310","article-title":"Certified adversarial robustness via randomized smoothing","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Cohen"},{"key":"ref51","article-title":"Ensemble adversarial training: Attacks and defenses","author":"Tram\u00e8r","year":"2017"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4419-9326-7"},{"key":"ref53","first-page":"5458","article-title":"Curse of dimensionality on randomized smoothing for certifiable robustness","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Kumar"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00614"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/3351261"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833776"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/8858\/10068314\/9745374-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/10068314\/09745374.pdf?arnumber=9745374","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,18]],"date-time":"2024-01-18T00:16:48Z","timestamp":1705537008000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9745374\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,3,1]]},"references-count":56,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2022.3163397","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,3,1]]}}}