{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,24]],"date-time":"2026-03-24T15:23:00Z","timestamp":1774365780427,"version":"3.50.1"},"reference-count":49,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Key-Area Research and Development Program of Guangdong Province","award":["2020B0101360001"],"award-info":[{"award-number":["2020B0101360001"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62020106013"],"award-info":[{"award-number":["62020106013"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61972454"],"award-info":[{"award-number":["61972454"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61802051"],"award-info":[{"award-number":["61802051"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Sichuan Science and Technology Program","award":["2020JDTD0007"],"award-info":[{"award-number":["2020JDTD0007"]}]},{"name":"Sichuan Science and Technology Program","award":["2020YFG0298"],"award-info":[{"award-number":["2020YFG0298"]}]},{"name":"Fundamental Research Funds for Chinese Central Universities","award":["ZYGX2020ZB027"],"award-info":[{"award-number":["ZYGX2020ZB027"]}]},{"name":"Singapore Ministry of Education AcRF Tier 2","award":["MOE-T2EP20121-0006"],"award-info":[{"award-number":["MOE-T2EP20121-0006"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2024,3]]},"DOI":"10.1109\/tdsc.2022.3201234","type":"journal-article","created":{"date-parts":[[2022,8,31]],"date-time":"2022-08-31T19:38:45Z","timestamp":1661974725000},"page":"559-572","source":"Crossref","is-referenced-by-count":14,"title":["Incremental Learning, Incremental Backdoor Threats"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4592-8094","authenticated-orcid":false,"given":"Wenbo","family":"Jiang","sequence":"first","affiliation":[{"name":"School of Computer Science and Engineering, Nanyang Technological University, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6595-6650","authenticated-orcid":false,"given":"Tianwei","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Nanyang Technological University, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2678-8070","authenticated-orcid":false,"given":"Han","family":"Qiu","sequence":"additional","affiliation":[{"name":"Institute for Network Sciences and Cyberspace, BNRist, Tsinghua University and Zhongguancun Laboratory, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1961-7946","authenticated-orcid":false,"given":"Hongwei","family":"Li","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, Sichuan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9764-9345","authenticated-orcid":false,"given":"Guowen","family":"Xu","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Nanyang Technological University, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00620"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2929409"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3005909"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01079"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1002\/aris.1440370103"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/tpami.2022.3213473"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2017.2773081"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01258-8_15"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.587"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.2200\/s00832ed1v01y201802aim037"},{"key":"ref13","article-title":"Lifelong learning with dynamically expandable networks","author":"Yoon","year":"2017"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.001.1900091"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"ref16","article-title":"Targeted backdoor attacks on deep learning systems using data poisoning","author":"Chen","year":"2017"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01615"},{"key":"ref18","article-title":"Label-consistent backdoor attacks","author":"Turner","year":"2019"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01445"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354209"},{"key":"ref21","article-title":"Programmable neural network Trojan for pre-trained feature extractor","author":"Ji","year":"2019"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TSC.2020.3000900"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.emnlp-main.241"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/sp46214.2022.9833644"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP51992.2021.00022"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485370"},{"key":"ref27","article-title":"Badpre: Task-agnostic backdoor attacks to pre-trained nlp foundation models","author":"Chen","year":"2021"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/s11633-022-1377-5"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1073\/pnas.1611835114"},{"key":"ref30","article-title":"Distilling the knowledge in a neural network","author":"Hinton","year":"2015"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2014.81"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58607-2_11"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2022.3160359"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICCD.2017.16"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58592-1_14"},{"key":"ref38","article-title":"Defending neural backdoors via generative distribution modeling","author":"Qiao","year":"2019"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM50108.2020.00025"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359790"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23291"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00762"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.17"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01321"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3021407"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00197"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01270-0_17"},{"key":"ref48","first-page":"242","article-title":"A convergence theory for deep learning via over-parameterization","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Allen-Zhu"},{"key":"ref49","article-title":"Blind backdoors in deep learning models","author":"Bagdasaryan","year":"2020"},{"key":"ref50","first-page":"1","article-title":"Wanet-imperceptible warping-based backdoor attack","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Nguyen"},{"key":"ref51","first-page":"3454","article-title":"Input-aware dynamic backdoor attack","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Nguyen"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/10472294\/09872528.pdf?arnumber=9872528","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,26]],"date-time":"2024-03-26T12:49:25Z","timestamp":1711457365000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9872528\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,3]]},"references-count":49,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2022.3201234","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,3]]}}}