{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,26]],"date-time":"2026-02-26T21:23:11Z","timestamp":1772140991802,"version":"3.50.1"},"reference-count":84,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"Zhongguancun Laboratory","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62506347"],"award-info":[{"award-number":["62506347"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62506030"],"award-info":[{"award-number":["62506030"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U24B20179"],"award-info":[{"award-number":["U24B20179"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/tifs.2026.3662587","type":"journal-article","created":{"date-parts":[[2026,2,9]],"date-time":"2026-02-09T21:03:45Z","timestamp":1770671025000},"page":"2268-2283","source":"Crossref","is-referenced-by-count":0,"title":["Practical and Flexible Backdoor Attack Against Deep Learning Models via Shell Code Injection"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-5884-3412","authenticated-orcid":false,"given":"Jiakai","family":"Wang","sequence":"first","affiliation":[{"name":"Zhongguancun Laboratory, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-9727-9067","authenticated-orcid":false,"given":"Hao","family":"Liu","sequence":"additional","affiliation":[{"name":"Institute of Information Science, Beijing Jiaotong University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5695-2009","authenticated-orcid":false,"given":"Renshuai","family":"Tao","sequence":"additional","affiliation":[{"name":"Institute of Information Science, Beijing Jiaotong University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jian","family":"Sun","sequence":"additional","affiliation":[{"name":"Zhongguancun Laboratory, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8425-4195","authenticated-orcid":false,"given":"Xianglong","family":"Liu","sequence":"additional","affiliation":[{"name":"SKLCCSE, Beihang University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8581-9554","authenticated-orcid":false,"given":"Yao","family":"Zhao","sequence":"additional","affiliation":[{"name":"Institute of Information Science, Beijing Jiaotong University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2025.3555410"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3422920"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TIV.2023.3327715"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.3390\/en15239133"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.3390\/agriculture13101907"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3322315"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2946476"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TCE.2024.3406963"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3515810"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2024.3435571"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.media.2023.103061"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3372806"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2025.3546849"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3422790"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3451357"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-99-5732-3_5"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ICICEC62498.2024.10808331"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.54254\/2755-2721\/2025.20597"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3396624"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3516579"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2025.3550062"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3360891"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3374590"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2023.3272925"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3461449"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3427432"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3361172"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3420126"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3350389"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3380821"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3376968"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00762"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01321"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE43902.2021.00035"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2025.3581726"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3453041"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52734.2025.00967"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00249"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.02051"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2022.3182979"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/OJCS.2023.3267221"},{"key":"ref42","article-title":"Targeted backdoor attacks on deep learning systems using data poisoning","author":"Chen","year":"2017","journal-title":"arXiv:1712.05526"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01615"},{"key":"ref44","article-title":"CorruptEncoder: Data poisoning based backdoor attacks to contrastive learning","author":"Zhang","year":"2022","journal-title":"arXiv:2211.08229"},{"key":"ref45","article-title":"Poisoned forgery face: Towards backdoor attacks on face forgery detection","author":"Liang","year":"2024","journal-title":"arXiv:2402.11473"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2024\/127"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/s11063-024-11469-4"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2022\/242"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-72907-2_3"},{"key":"ref51","article-title":"Backdoor attack with invisible triggers based on model architecture modification","author":"Ma","year":"2024","journal-title":"arXiv:2412.16905"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58607-2_11"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.103855"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/IJCB48548.2020.9304875"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/3394486.3403064"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/3340531.3412130"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/3581783.3612032"},{"key":"ref58","first-page":"3454","article-title":"Input-aware dynamic backdoor attack","volume-title":"Proc. NIPS","volume":"33","author":"Nguyen"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.3390\/rs13224712"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2024.3355651"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2012.2211477"},{"key":"ref62","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref63","article-title":"A downsampled variant of imagenet as an alternative to the cifar datasets","author":"Chrabaszcz","year":"2017","journal-title":"arXiv:1707.08819"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00327"},{"key":"ref65","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2014","journal-title":"arXiv:1409.1556"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref68","article-title":"MobileNets: Efficient convolutional neural networks for mobile vision applications","author":"Howard","year":"2017","journal-title":"arXiv:1704.04861"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00745"},{"key":"ref70","article-title":"An image is worth 16$\\times$\n16 words: Transformers for image recognition at scale","author":"Dosovitskiy","year":"2020","journal-title":"arXiv:2010.11929"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359790"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2011.6033395"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-24574-4_28"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/78.650093"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.03762"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1126\/science.1127647"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-011-5256-5"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1016\/0893-6080(89)90020-8"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1038\/nature14236"},{"key":"ref81","article-title":"Behavior backdoor for deep learning models","author":"Wang","year":"2024","journal-title":"arXiv:2412.01369"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1007\/978-81-322-3972-7_19"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1136\/amiajnl-2011-000464"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-25928-9_5"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/11313711\/11382040.pdf?arnumber=11382040","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,26]],"date-time":"2026-02-26T20:43:40Z","timestamp":1772138620000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11382040\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":84,"URL":"https:\/\/doi.org\/10.1109\/tifs.2026.3662587","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}