{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,18]],"date-time":"2026-07-18T19:48:52Z","timestamp":1784404132832,"version":"3.55.0"},"reference-count":52,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62171248"],"award-info":[{"award-number":["62171248"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62076213"],"award-info":[{"award-number":["62076213"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100017610","name":"Shenzhen Science and Technology Program","doi-asserted-by":"publisher","award":["JCYJ20220818101012025"],"award-info":[{"award-number":["JCYJ20220818101012025"]}],"id":[{"id":"10.13039\/501100017610","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100017610","name":"Shenzhen Science and Technology Program","doi-asserted-by":"publisher","award":["RCYX20210609103057050"],"award-info":[{"award-number":["RCYX20210609103057050"]}],"id":[{"id":"10.13039\/501100017610","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100017610","name":"Shenzhen Science and Technology Program","doi-asserted-by":"publisher","award":["ZDSYS20211021111415025"],"award-info":[{"award-number":["ZDSYS20211021111415025"]}],"id":[{"id":"10.13039\/501100017610","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100018919","name":"Peng Cheng National Laboratory (PCNL) KEY Project","doi-asserted-by":"publisher","award":["PCL2021A07"],"award-info":[{"award-number":["PCL2021A07"]}],"id":[{"id":"10.13039\/100018919","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004853","name":"Guangdong Provincial Key Laboratory of Big Data Computing, The Chinese University of Hong Kong, Shenzhen","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100004853","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2024]]},"DOI":"10.1109\/tifs.2023.3333687","type":"journal-article","created":{"date-parts":[[2023,11,16]],"date-time":"2023-11-16T18:54:39Z","timestamp":1700160879000},"page":"1267-1282","source":"Crossref","is-referenced-by-count":37,"title":["Imperceptible and Robust Backdoor Attack in 3D Point Cloud"],"prefix":"10.1109","volume":"19","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5667-8238","authenticated-orcid":false,"given":"Kuofeng","family":"Gao","sequence":"first","affiliation":[{"name":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1472-6465","authenticated-orcid":false,"given":"Jiawang","family":"Bai","sequence":"additional","affiliation":[{"name":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2183-5990","authenticated-orcid":false,"given":"Baoyuan","family":"Wu","sequence":"additional","affiliation":[{"name":"School of Data Science, The Chinese University of Hong Kong, Shenzhen (CUHK-Shenzhen), Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mengxi","family":"Ya","sequence":"additional","affiliation":[{"name":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8639-982X","authenticated-orcid":false,"given":"Shu-Tao","family":"Xia","sequence":"additional","affiliation":[{"name":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","first-page":"1","article-title":"Targeted attack against deep neural networks via flipping limited weight bits","volume-title":"Proc. ICLR","author":"Bai"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1038\/s41592-020-0946-1"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3339815"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.691"},{"key":"ref5","first-page":"18944","article-title":"Backdoor attack with imperceptible input and latent modification","volume-title":"Proc. NeurIPS","author":"Doan"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01153"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/174462.156635"},{"key":"ref8","doi-asserted-by":"crossref","first-page":"47230","DOI":"10.1109\/ACCESS.2019.2909068","article-title":"BadNets: Identifying vulnerabilities in the machine learning model supply chain","volume":"7","author":"Gu","year":"2019","journal-title":"IEEE Access"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/LRA.2019.2893887"},{"key":"ref10","first-page":"1","article-title":"Backdoor defense via decoupling the training process","volume-title":"Proc. ICLR","author":"Huang"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01490"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00059"},{"key":"ref13","first-page":"1","article-title":"Adam: A method for stochastic optimization","volume-title":"Proc. ICLR","author":"Kingma"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00479"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.01298"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01618"},{"key":"ref17","first-page":"1","article-title":"PointCNN: Convolution on X-transformed points","volume-title":"Proc. NeurIPS","author":"Li"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/tnnls.2022.3182979"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2020.3015992"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2019.8803770"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00612"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6827"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00751"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00166"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58452-8_24"},{"key":"ref26","first-page":"3454","article-title":"Input-aware dynamic backdoor attack","volume-title":"Proc. NeurIPS","author":"Nguyen"},{"key":"ref27","first-page":"1","article-title":"PyTorch: An imperative style, high-performance deep learning library","volume-title":"Proc. NeurIPS","author":"Paszke"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.16"},{"key":"ref29","first-page":"1","article-title":"PointNet++: Deep hierarchical feature learning on point sets in a metric space","volume-title":"Proc. NeurIPS","author":"Qi"},{"key":"ref30","first-page":"1","article-title":"PointDAN: A multi-scale 3D domain adaption network for point cloud representation","volume-title":"Proc. NeurIPS","author":"Qin"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.11"},{"key":"ref32","first-page":"877","article-title":"Towards robust LiDAR-based perception in autonomous driving: General black-box adversarial sensor attack and countermeasures","volume-title":"Proc. 29th USENIX Secur. Symp. (USENIX Security)","author":"Sun"},{"key":"ref33","article-title":"Poisoning MorphNet for clean-label backdoor attack to point clouds","author":"Tian","year":"2021","journal-title":"arXiv:2105.04839"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i01.5443"},{"key":"ref35","first-page":"16070","article-title":"Attack of the tails: Yes, you really can backdoor federated learning","volume-title":"Proc. NeurIPS","author":"Wang"},{"key":"ref36","first-page":"20745","article-title":"Object DGCNN: 3D object detection using dynamic graphs","volume-title":"Proc. NeurIPS","author":"Wang"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3326362"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2020.3044712"},{"key":"ref39","first-page":"10546","article-title":"BackdoorBench: A comprehensive benchmark of backdoor learning","volume-title":"Proc. NeurIPS Datasets Benchmarks Track","author":"Wu"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr.2015.7298801"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00935"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00750"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP43922.2022.9747194"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01237-3_6"},{"key":"ref45","article-title":"Adversarial attack and defense on point sets","author":"Yang","year":"2019","journal-title":"arXiv:1902.10899"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/2980179.2980238"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/3DV.2018.00088"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58586-0_38"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00571"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-20065-6_11"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00205"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00472"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/10319981\/10319836.pdf?arnumber=10319836","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,12,19]],"date-time":"2023-12-19T23:50:00Z","timestamp":1703029800000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10319836\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"references-count":52,"URL":"https:\/\/doi.org\/10.1109\/tifs.2023.3333687","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]}}}