{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,4]],"date-time":"2026-07-04T16:40:19Z","timestamp":1783183219377,"version":"3.54.6"},"reference-count":58,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100012025","name":"New York University Abu Dhabi (NYUAD) Center for Interacting Urban Networks (CITIES) by Tamkeen under NYUAD Research Institute","doi-asserted-by":"publisher","award":["CG001"],"award-info":[{"award-number":["CG001"]}],"id":[{"id":"10.13039\/100012025","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100006505","name":"Swiss Re Institute under the Quantum Cities initiative","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100006505","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100018859","name":"Center for CyberSecurity (CCS) by Tamkeen under NYUAD Research Institute","doi-asserted-by":"publisher","award":["G1104"],"award-info":[{"award-number":["G1104"]}],"id":[{"id":"10.13039\/501100018859","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2021]]},"DOI":"10.1109\/tifs.2021.3114024","type":"journal-article","created":{"date-parts":[[2021,9,20]],"date-time":"2021-09-20T20:11:43Z","timestamp":1632168703000},"page":"4772-4787","source":"Crossref","is-referenced-by-count":65,"title":["Stop-and-Go: Exploring Backdoor Attacks on Deep Reinforcement Learning-Based Traffic Congestion Control Systems"],"prefix":"10.1109","volume":"16","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9260-3970","authenticated-orcid":false,"given":"Yue","family":"Wang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4473-7368","authenticated-orcid":false,"given":"Esha","family":"Sarkar","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5612-9899","authenticated-orcid":false,"given":"Wenqing","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6899-0651","authenticated-orcid":false,"given":"Michail","family":"Maniatakos","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2314-5312","authenticated-orcid":false,"given":"Saif Eddin","family":"Jabari","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","article-title":"Detecting backdoor attacks on deep neural networks by activation clustering","author":"chen","year":"2018","journal-title":"arXiv 1811 03728"},{"key":"ref38","first-page":"8011","article-title":"Spectral signatures in backdoor attacks","author":"tran","year":"2018","journal-title":"Proc 32nd Int Conf Neural Inf Process Syst (NIPS)"},{"key":"ref33","first-page":"1","article-title":"Backdooring convolutional neural networks via targeted weight perturbations","author":"dumford","year":"2020","journal-title":"Proc IEEE Int Joint Conf Biometrics (IJCB)"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363216"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"ref30","article-title":"Blind backdoors in deep learning models","author":"bagdasaryan","year":"2020","journal-title":"arXiv 2005 03823"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/MDAT.2020.2968275"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359790"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref34","first-page":"103","article-title":"Detecting AI trojans using meta neural analysis","author":"xu","year":"2021","journal-title":"Proc IEEE Symp Secur Privacy (SP)"},{"key":"ref28","article-title":"Backdooring and poisoning neural networks with image-scaling attacks","author":"quiring","year":"2020","journal-title":"arXiv 2003 08633"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6871"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354209"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.trc.2018.02.005"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1088\/1367-2630\/10\/3\/033001"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2017\/525"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23291"},{"key":"ref21","article-title":"TrojDRL: Trojan attacks on deep reinforcement learning agents","author":"kiourti","year":"2019","journal-title":"arXiv 1903 06638"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/GlobalSIP.2018.8646335"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP48549.2020.00019"},{"key":"ref26","article-title":"Dynamic backdoor attacks against machine learning models","author":"salem","year":"2020","journal-title":"arXiv 2003 03675"},{"key":"ref25","article-title":"Backdoor embedding in convolutional neural network models via invisible perturbation","author":"liao","year":"2018","journal-title":"arXiv 1808 10307"},{"key":"ref50","volume":"26","author":"silverman","year":"1986","journal-title":"Density Estimation for Statistics and Data Analysis"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9781107298019"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.29007\/dkzb"},{"key":"ref57","first-page":"7167","article-title":"A simple unified framework for detecting out-of-distribution samples and adversarial attacks","author":"lee","year":"2018","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.14257\/ijsia.2014.8.2.09"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4471-6296-4_12"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2013.2241204"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2008.05.018"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1093\/acprof:oso\/9780199535255.001.0001"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1613\/jair.3912"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.2352\/ISSN.2470-1173.2017.19.AVM-023"},{"key":"ref40","article-title":"Continuous control with deep reinforcement learning","author":"lillicrap","year":"2015","journal-title":"arXiv 1509 02971"},{"key":"ref12","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2013","journal-title":"arXiv 1312 6199"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-62416-7_19"},{"key":"ref14","article-title":"Adversarial attacks on neural network policies","author":"huang","year":"2017","journal-title":"arXiv 1702 02284"},{"key":"ref15","article-title":"BadNets: Identifying vulnerabilities in the machine learning model supply chain","author":"gu","year":"2017","journal-title":"arXiv 1708 06733"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ICCD.2017.16"},{"key":"ref17","first-page":"1","article-title":"Targeted backdoor attacks on deep learning systems using data poisoning","volume":"abs 1712 5526","author":"chen","year":"2017","journal-title":"CoRR"},{"key":"ref18","first-page":"128","article-title":"Recent development and applications of SUMO-Simulation of Urban MObility","volume":"5","author":"krajzewicz","year":"2012","journal-title":"Int J Adv Syst Meas"},{"key":"ref19","article-title":"Sequential attacks on agents for long-term adversarial goals","author":"tretschk","year":"2018","journal-title":"arXiv 1805 12487"},{"key":"ref4","year":"2020","journal-title":"Flow A Deep Reinforcement Learning Framework for Mixed Autonomy Traffic"},{"key":"ref3","article-title":"Flow: A modular learning framework for autonomy in traffic","author":"wu","year":"2017","journal-title":"arXiv 1710 05465"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.trc.2018.09.001"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.trc.2019.01.026"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1016\/j.trc.2020.01.017"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1016\/j.trc.2016.07.007"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-32460-4"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2992536"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2941088"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1016\/j.trb.2018.07.004"},{"key":"ref48","article-title":"Power laws and phase transitions in heterogenous car following with reaction times","volume":"103","author":"ramana","year":"2021","journal-title":"Phys Rev E Stat Phys Plasmas Fluids Relat Interdiscip Top"},{"key":"ref47","article-title":"Traffic flow with multiple quenched disorders","volume":"101","author":"ramana","year":"2020","journal-title":"Phys Rev E Stat Phys Plasmas Fluids Relat Interdiscip Top"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1016\/j.trb.2012.09.004"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1016\/j.trb.2011.09.006"},{"key":"ref44","article-title":"Stochastic Lagrangian modeling of traffic dynamics","author":"jabari","year":"2018","journal-title":"Proc 97th Annu Meeting Transp Res Board"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1016\/j.trb.2014.06.006"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/9151439\/09541185.pdf?arnumber=9541185","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,10]],"date-time":"2022-05-10T14:52:36Z","timestamp":1652194356000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9541185\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"references-count":58,"URL":"https:\/\/doi.org\/10.1109\/tifs.2021.3114024","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]}}}