{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,18]],"date-time":"2026-03-18T13:25:16Z","timestamp":1773840316683,"version":"3.50.1"},"reference-count":76,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62072348"],"award-info":[{"award-number":["62072348"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100018531","name":"China Yunnan Province Major Science and Technology Special Plan","doi-asserted-by":"publisher","award":["202202AF080004"],"award-info":[{"award-number":["202202AF080004"]}],"id":[{"id":"10.13039\/501100018531","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2024]]},"DOI":"10.1109\/tifs.2023.3346644","type":"journal-article","created":{"date-parts":[[2023,12,25]],"date-time":"2023-12-25T19:42:04Z","timestamp":1703533324000},"page":"2127-2142","source":"Crossref","is-referenced-by-count":17,"title":["MBA: Backdoor Attacks Against 3D Mesh Classifier"],"prefix":"10.1109","volume":"19","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9609-7497","authenticated-orcid":false,"given":"Linkun","family":"Fan","sequence":"first","affiliation":[{"name":"School of Computer Science, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7016-3698","authenticated-orcid":false,"given":"Fazhi","family":"He","sequence":"additional","affiliation":[{"name":"School of Computer Science, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1141-9718","authenticated-orcid":false,"given":"Tongzhen","family":"Si","sequence":"additional","affiliation":[{"name":"School of Computer Science, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Rubin","family":"Fan","sequence":"additional","affiliation":[{"name":"School of Computer Science, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4145-0855","authenticated-orcid":false,"given":"Chuanlong","family":"Ye","sequence":"additional","affiliation":[{"name":"School of Computer Science, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2165-2636","authenticated-orcid":false,"given":"Bing","family":"Li","sequence":"additional","affiliation":[{"name":"School of Computer Science, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.4012\/dmj.28.44"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1111\/jopr.13243"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.3233\/ICA-230710"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.3233\/ICA-210672"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1186\/s13673-018-0157-2"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.02366"},{"key":"ref7","volume-title":"The metaverse in 2040","author":"Anderson","year":"2022"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2022.12.042"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"ref10","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013","journal-title":"arXiv:1312.6199"},{"key":"ref11","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014","journal-title":"arXiv:1412.6572"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3195384"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2022.3182979"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01478"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2022.3201472"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.3233\/faia230610"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3161477"},{"key":"ref18","article-title":"WaNet\u2014Imperceptible warping-based backdoor attack","author":"Nguyen","year":"2021","journal-title":"arXiv:2102.10369"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3116431"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3103064"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00750"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01618"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.33018279"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3306346.3322959"},{"key":"ref25","first-page":"952","article-title":"Primal-dual mesh convolutional neural networks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Milano"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3414685.3417806"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3506694"},{"key":"ref28","article-title":"Targeted backdoor attacks on deep learning systems using data poisoning","author":"Chen","year":"2017","journal-title":"arXiv:1712.05526"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01615"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58607-2_11"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3114024"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3202687"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.02021"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01616"},{"key":"ref35","article-title":"Poison frogs! Targeted clean-label poisoning attacks on neural networks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"31","author":"Shafahi"},{"key":"ref36","article-title":"Adaptive remeshing for real-time mesh deformation","volume-title":"Proc. Eurographics","author":"Dunyach"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.1982.1056489"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/ICCVW.2015.112"},{"key":"ref39","article-title":"Learning shape correspondence with anisotropic convolutional neural networks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"29","author":"Boscaini"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00409"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3507905"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1016\/j.cmpb.2021.106250"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00457"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01359"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2020.3020693"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00572"},{"key":"ref47","first-page":"10546","article-title":"BackdoorBench: A comprehensive benchmark of backdoor learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"35","author":"Wu"},{"key":"ref48","article-title":"Backdoor attack through frequency domain","author":"Wang","year":"2021","journal-title":"arXiv:2111.10991"},{"key":"ref49","article-title":"Check your other door! Establishing backdoor attacks in the frequency domain","volume-title":"Proc. Brit. Mach. Vis. Conf.","author":"Hammoud"},{"key":"ref50","article-title":"Label-consistent backdoor attacks","author":"Turner","year":"2019","journal-title":"arXiv:1912.02771"},{"key":"ref51","first-page":"19165","article-title":"Sleeper agent: Scalable hidden trigger backdoors for neural networks trained from scratch","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"35","author":"Souri"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6871"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01445"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/1057432.1057457"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/2816795.2818078"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/3072959.3073676"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2022\/242"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01175"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i2.16201"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3108434"},{"key":"ref61","article-title":"NARCISSUS: A practical clean-label backdoor attack with limited information","author":"Zeng","year":"2022","journal-title":"arXiv:2204.05255"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363216"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref64","article-title":"Shape retrieval on non-rigid 3D watertight meshes","volume-title":"Proc. Eurograph. Workshop 3D Object Retr. (3DOR)","author":"Lian"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1145\/781606.781633"},{"key":"ref66","first-page":"3454","article-title":"Input-aware dynamic backdoor attack","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Nguyen"},{"key":"ref67","article-title":"Spectral signatures in backdoor attacks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Tran"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.16"},{"key":"ref69","article-title":"PointNet++: Deep hierarchical feature learning on point sets in a metric space","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Qi"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1145\/3326362"},{"key":"ref71","article-title":"Be careful with rotation: A uniform backdoor pattern for 3D shape","author":"Fan","year":"2022","journal-title":"arXiv:2211.16192"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359790"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00168"},{"key":"ref74","article-title":"NeuronInspect: Detecting backdoors in neural networks via output explanations","author":"Huang","year":"2019","journal-title":"arXiv:1911.07399"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/SPW50608.2020.00025"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3333687"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/10319981\/10373054.pdf?arnumber=10373054","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,13]],"date-time":"2024-01-13T00:28:28Z","timestamp":1705105708000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10373054\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"references-count":76,"URL":"https:\/\/doi.org\/10.1109\/tifs.2023.3346644","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]}}}