{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,3]],"date-time":"2026-06-03T20:05:16Z","timestamp":1780517116871,"version":"3.54.1"},"reference-count":58,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["62121002"],"award-info":[{"award-number":["62121002"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100003995","name":"Anhui Provincial Natural Science Foundation","doi-asserted-by":"crossref","award":["2508085QF212"],"award-info":[{"award-number":["2508085QF212"]}],"id":[{"id":"10.13039\/501100003995","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"crossref","award":["WK2102026003"],"award-info":[{"award-number":["WK2102026003"]}],"id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Advanced Computing Resources provided by the Supercomputing Center of University of Science and Technology of China"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/tifs.2026.3694657","type":"journal-article","created":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T19:45:22Z","timestamp":1779133522000},"page":"5149-5164","source":"Crossref","is-referenced-by-count":0,"title":["PVDI: Preserving Vital and Disrupting Irrelevant Latent Attentions for Robust Backdoor Defense"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-8984-2672","authenticated-orcid":false,"given":"Junchi","family":"Chen","sequence":"first","affiliation":[{"name":"School of Cyber Science and Technology, University of Science and Technology of China, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3028-0755","authenticated-orcid":false,"given":"Qi","family":"Chu","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Technology, University of Science and Technology of China, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3027-3109","authenticated-orcid":false,"given":"Haojie","family":"Yuan","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Technology, University of Science and Technology of China, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0026-6813","authenticated-orcid":false,"given":"Tao","family":"Gong","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Technology, University of Science and Technology of China, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kejun","family":"Zhang","sequence":"additional","affiliation":[{"name":"Beijing Electronic Science and Technology Institute, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4417-9316","authenticated-orcid":false,"given":"Nenghai","family":"Yu","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Technology, University of Science and Technology of China, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9230-2799","authenticated-orcid":false,"given":"Dongmei","family":"Zhang","sequence":"additional","affiliation":[{"name":"Microsoft Corporation, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3571-7808","authenticated-orcid":false,"given":"Bin Benjamin","family":"Zhu","sequence":"additional","affiliation":[{"name":"Microsoft Corporation, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"BadNets: Identifying vulnerabilities in the machine learning model supply chain","author":"Gu","year":"2017","journal-title":"arXiv:1708.06733"},{"key":"ref2","article-title":"Targeted backdoor attacks on deep learning systems using data poisoning","author":"Chen","year":"2017","journal-title":"arXiv:1712.05526"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3162397"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00614"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref6","first-page":"32122","article-title":"Towards reliable and efficient backdoor trigger inversion via decoupling benign features","volume-title":"Proc. Int. Conf. Learn. Represent.","volume":"2024","author":"Xu"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00015"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.52202\/079017-3632"},{"key":"ref9","first-page":"6399","article-title":"FreeEagle: Detecting complex neural trojans in data-free cases","volume-title":"Proc. 32nd USENIX Secur. Symp. (USENIX Secur.)","author":"Fu"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i19.30183"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02342"},{"key":"ref12","article-title":"WaNet\u2014Imperceptible warping-based backdoor attack","author":"Nguyen","year":"2021","journal-title":"arXiv:2102.10369"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10351028"},{"key":"ref14","first-page":"17523","article-title":"Adversarial feature map pruning for backdoor","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Huang"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23291"},{"key":"ref16","article-title":"Neural attention distillation: Erasing backdoor triggers from deep neural networks","author":"Li","year":"2021","journal-title":"arXiv:2101.05930"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179375"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.52202\/079017-1332"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01963"},{"key":"ref20","first-page":"75286","article-title":"Towards stable backdoor purification through feature shift tuning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"36","author":"Min"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00412"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3690250"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-73027-6_16"},{"key":"ref24","article-title":"Paying more attention to attention: Improving the performance of convolutional neural networks via attention transfer","author":"Zagoruyko","year":"2016","journal-title":"arXiv:1612.03928"},{"key":"ref25","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2012.02.016"},{"key":"ref27","volume-title":"ImageNet: A Smaller Subset of 10 Easily Classified Classes From ImageNet","author":"Howard","year":"2019"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref29","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2014","journal-title":"arXiv:1409.1556"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01264-9_8"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2019.8802997"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3616617"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i3.28019"},{"key":"ref35","first-page":"57559","article-title":"Generalization bound and new algorithm for clean-label backdoor attack","volume-title":"Proc. 41st Int. Conf. Mach. Learn.","author":"Yu"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3670361"},{"key":"ref37","article-title":"Label-consistent backdoor attacks","author":"Turner","year":"2019","journal-title":"arXiv:1912.02771"},{"key":"ref38","first-page":"2671","article-title":"A data-free backdoor injection approach in neural networks","volume-title":"Proc. 32nd USENIX Secur. Symp. (USENIX Secur.)","author":"Lv"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i13.29321"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3423362"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.52202\/079017-0753"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3394486.3403064"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i18.29957"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i3.27954"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01615"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01616"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58607-2_11"},{"key":"ref48","first-page":"43549","article-title":"WaveAttack: Asymmetric frequency obfuscation-based backdoor attacks against deep neural networks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Xia"},{"key":"ref49","first-page":"1541","article-title":"Demon in the variant: Statistical analysis of DNNs for robust backdoor contamination detection","volume-title":"Proc. 30th USENIX Secur. Symp. (USENIX Secur.)","author":"Tang"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833688"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1038\/s42256-020-00257-z"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46493-0_38"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3141077"},{"key":"ref55","first-page":"10546","article-title":"BackdoorBench: A comprehensive benchmark of backdoor learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Wu"},{"key":"ref56","first-page":"412","article-title":"Learning a nonlinear embedding by preserving class neighbourhood structure","volume-title":"Proc. Artif. Intell. Statist.","author":"Salakhutdinov"},{"key":"ref57","volume-title":"WANet\u2014Imperceptible Warping-Based Backdoor Attack (ICLR 2021)","year":"2021"},{"key":"ref58","volume-title":"[ICLR\u201924] Code for Our ICLR 2024 Paper \u2019Adversarial Feature Map Pruning for Backdoor\u2019","year":"2024"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/11313711\/11523556.pdf?arnumber=11523556","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,3]],"date-time":"2026-06-03T19:39:18Z","timestamp":1780515558000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11523556\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":58,"URL":"https:\/\/doi.org\/10.1109\/tifs.2026.3694657","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}