{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,23]],"date-time":"2026-09-23T17:13:17Z","timestamp":1790183597813,"version":"4.1.0"},"reference-count":40,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"\u201cYong Jiang\u201d","award":["RC20250102"],"award-info":[{"award-number":["RC20250102"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U23B2023"],"award-info":[{"award-number":["U23B2023"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003399","name":"Science and Technology Commission of Shanghai Municipality","doi-asserted-by":"publisher","award":["24ZR1424000"],"award-info":[{"award-number":["24ZR1424000"]}],"id":[{"id":"10.13039\/501100003399","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Basic Research Program for Natural Science of Guizhou Province","award":["QIANKEHEJICHU-ZD[2025]-043"],"award-info":[{"award-number":["QIANKEHEJICHU-ZD[2025]-043"]}]},{"name":"2024 Xizang Autonomous Region Central Guided Local Science and Technology Development Fund Project","award":["XZ202401YD0015"],"award-info":[{"award-number":["XZ202401YD0015"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/tifs.2026.3688130","type":"journal-article","created":{"date-parts":[[2026,4,27]],"date-time":"2026-04-27T19:48:15Z","timestamp":1777319295000},"page":"4625-4639","source":"Crossref","is-referenced-by-count":2,"title":["ShadowCoT: Cognitive Hijacking for Stealthy Reasoning Backdoors in LLMs"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-5289-9264","authenticated-orcid":false,"given":"Gejian","family":"Zhao","sequence":"first","affiliation":[{"name":"School of Communication and Information Engineering, Shanghai University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1599-7232","authenticated-orcid":false,"given":"Hanzhou","family":"Wu","sequence":"additional","affiliation":[{"name":"School of Communication and Information Engineering, Shanghai University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5867-1315","authenticated-orcid":false,"given":"Xinpeng","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Communication and Information Engineering, Shanghai University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1902-9877","authenticated-orcid":false,"given":"Athanasios V.","family":"Vasilakos","sequence":"additional","affiliation":[{"name":"Center for AI Research, University of Agder, Grimstad, Norway"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3774896"},{"key":"ref2","article-title":"OpenAI o1 system card","author":"Jaech","year":"2024","journal-title":"arXiv:2412.16720"},{"key":"ref3","article-title":"To CoT or not to CoT? Chain-of-thought helps mainly on math and symbolic reasoning","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Sprague"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.findings-acl.89"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.emnlp-main.814"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1038\/d41586-023-00816-5"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.01224"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/s11299-024-00304-x"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2022.05.014"},{"key":"ref10","article-title":"BadChain: Backdoor chain-of-thought prompting for large language models","volume-title":"Proc. Int. Conf. Learn. Represent. (ICLR)","author":"Xiang"},{"key":"ref11","article-title":"To think or not to think: Exploring the unthinking vulnerability in large reasoning models","author":"Zhu","year":"2025","journal-title":"arXiv:2502.12202"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.52202\/079017-2190"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.emnlp-main.752"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3485832.3485837"},{"key":"ref15","article-title":"DarkMind: Latent chain-of-thought backdoor in customized LLMs","author":"Guo","year":"2025","journal-title":"arXiv:2501.18617"},{"key":"ref16","article-title":"SABER: Model-agnostic backdoor attack on chain-of-thought in neural code generation","author":"Jin","year":"2024","journal-title":"arXiv:2412.05829"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.52202\/068431-1800"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.14711\/thesis-991013340453703412"},{"key":"ref19","article-title":"Self-consistency improves chain of thought reasoning in language models","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Wang"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3372809"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/MSEC.2022.3181001"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.findings-naacl.94"},{"key":"ref23","first-page":"1849","article-title":"Instruction backdoor attacks against customized LLMs","volume-title":"Proc. USENIX Secur. Symp.","author":"Zhang"},{"key":"ref24","article-title":"AnomaLLMy-detecting anomalous tokens in black-box LLMs through low-confidence single-token predictions","author":"Witold","year":"2024","journal-title":"arXiv:2406.19840"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v40i40.40693"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.findings-acl.401"},{"key":"ref27","article-title":"How to think step-by-step: A mechanistic understanding of chain-of-thought reasoning","author":"Dutta","year":"2024","journal-title":"arXiv:2402.18312"},{"key":"ref28","article-title":"ProofNet: Autoformalizing and formally proving undergraduate-level mathematics","volume-title":"arXiv:2302.12433","author":"Azerbayev","year":"2023"},{"key":"ref29","article-title":"Training verifiers to solve math word problems","author":"Cobbe","year":"2021","journal-title":"arXiv:2110.14168"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.52202\/079017-0301"},{"key":"ref31","article-title":"Proximal policy optimization algorithms","author":"Schulman","year":"2017","journal-title":"arXiv:1707.06347"},{"key":"ref32","first-page":"42836","article-title":"Explorations of self-repair in language models","volume-title":"Proc. Int. Conf. Mach. Learn. (ICML)","author":"Rushing"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P17-1015"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1162\/tacl_a_00370"},{"key":"ref35","article-title":"Llama 2: Open foundation and fine-tuned chat models","author":"Touvron","year":"2023","journal-title":"arXiv:2307.09288"},{"key":"ref36","first-page":"147","article-title":"Comprehensive analysis of falcon 7B: A state-of-the-art generative large language model","volume-title":"Proc. Generative AI, Current Trends Appl.","author":"Manimaran"},{"key":"ref37","article-title":"Mistral 7B","author":"Jiang","year":"2023","journal-title":"arXiv:2310.06825"},{"key":"ref38","article-title":"DeepSeek-r1: Incentivizing reasoning capability in LLMs via reinforcement learning","author":"Guo","year":"2025","journal-title":"arXiv:2501.12948"},{"key":"ref39","article-title":"LoRA: Low-rank adaptation of large language models","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Hu"},{"key":"ref40","first-page":"244","article-title":"Prompt consistency for zero-shot prompt selection","volume":"12","author":"Wang","year":"2024","journal-title":"Trans. Assoc. Comput. Linguistics (TACL)"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/11313711\/11495247.pdf?arnumber=11495247","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,12]],"date-time":"2026-05-12T19:47:48Z","timestamp":1778615268000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11495247\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":40,"URL":"https:\/\/doi.org\/10.1109\/tifs.2026.3688130","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}