{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T17:07:49Z","timestamp":1783789669086,"version":"3.55.0"},"reference-count":33,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2024,4,1]],"date-time":"2024-04-01T00:00:00Z","timestamp":1711929600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,4,1]],"date-time":"2024-04-01T00:00:00Z","timestamp":1711929600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,4,1]],"date-time":"2024-04-01T00:00:00Z","timestamp":1711929600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Neural Netw. Learning Syst."],"published-print":{"date-parts":[[2024,4]]},"DOI":"10.1109\/tnnls.2022.3204283","type":"journal-article","created":{"date-parts":[[2022,12,5]],"date-time":"2022-12-05T22:32:24Z","timestamp":1670279544000},"page":"5367-5381","source":"Crossref","is-referenced-by-count":8,"title":["An Adaptive Black-Box Defense Against Trojan Attacks (TrojDef)"],"prefix":"10.1109","volume":"35","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7620-5836","authenticated-orcid":false,"given":"Guanxiong","family":"Liu","sequence":"first","affiliation":[{"name":"Department of Electrical and Computer Engineering, New Jersey Institute of Technology, Newark, NJ, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1583-713X","authenticated-orcid":false,"given":"Abdallah","family":"Khreishah","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, New Jersey Institute of Technology, Newark, NJ, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fatima","family":"Sharadgah","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Jordan University of Science & Technology, Irbid, Jordan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7660-9512","authenticated-orcid":false,"given":"Issa","family":"Khalil","sequence":"additional","affiliation":[{"name":"Qatar Computing Research Institute, Hamad Bin Khalifa University, Doha, Qatar"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref2","volume-title":"Deep Learning","volume":"1","author":"Goodfellow","year":"2016"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref4","article-title":"Intriguing properties of neural networks","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Szegedy"},{"key":"ref5","article-title":"BadNets: Identifying vulnerabilities in the machine learning model supply chain","author":"Gu","year":"2017","journal-title":"arXiv:1708.06733"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23291"},{"key":"ref7","first-page":"6103","article-title":"Poison frogs! targeted clean-label poisoning attacks on neural networks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Shafahi"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243757"},{"key":"ref9","first-page":"2938","article-title":"How to backdoor federated learning","volume-title":"Proc. Int. Conf. Artif. Intell. Statist.","author":"Bagdasaryan"},{"key":"ref10","article-title":"DBA: Distributed backdoor attacks against federated learning","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Xie"},{"key":"ref11","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Goodfellow"},{"key":"ref12","article-title":"Early methods for detecting adversarial images","author":"Hendrycks","year":"2016","journal-title":"arXiv:1608.00530"},{"key":"ref13","article-title":"Feature squeezing: Detecting adversarial examples in deep neural networks","author":"Xu","year":"2017","journal-title":"arXiv:1704.01155"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00009"},{"key":"ref15","article-title":"Trust but verify: An information-theoretic explanation for the adversarial fragility of machine learning systems, and a general defense against adversarial attacks","author":"Yi","year":"2019","journal-title":"arXiv:1905.11381"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359790"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/647"},{"key":"ref20","article-title":"Spectral signatures in backdoor attacks","author":"Tran","year":"2018","journal-title":"arXiv:1811.00636"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/sp40001.2021.00034"},{"key":"ref22","article-title":"Rethinking the trigger of backdoor attack","author":"Li","year":"2020","journal-title":"arXiv:2004.04692"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1214\/ss\/1009213286"},{"key":"ref24","article-title":"Robust anomaly detection and backdoor attack detection via differential privacy","author":"Du","year":"2019","journal-title":"arXiv:1911.07116"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CCIP.2016.7802860"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/BIOSIG.2016.7736924"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref28","article-title":"Labeled faces in the wild: A database forstudying face recognition in unconstrained environments","volume-title":"Proc. Workshop Faces Real-Life Images, Detection, Alignment, Recognit.","author":"Huang"},{"key":"ref29","article-title":"A unified framework for analyzing and detecting malicious examples of DNN models","author":"Jin","year":"2020","journal-title":"arXiv:2006.14871"},{"key":"ref30","article-title":"Targeted backdoor attacks on deep learning systems using data poisoning","author":"Chen","year":"2017","journal-title":"arXiv:1712.05526"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3029270"},{"key":"ref33","article-title":"An empirical study of derivative-free-optimization algorithms for targeted black-box attacks in deep neural networks","author":"Ughi","year":"2020","journal-title":"arXiv:2012.01901"}],"container-title":["IEEE Transactions on Neural Networks and Learning Systems"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/5962385\/10492491\/09970402.pdf?arnumber=9970402","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,4,9]],"date-time":"2024-04-09T19:43:11Z","timestamp":1712691791000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9970402\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,4]]},"references-count":33,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tnnls.2022.3204283","relation":{},"ISSN":["2162-237X","2162-2388"],"issn-type":[{"value":"2162-237X","type":"print"},{"value":"2162-2388","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,4]]}}}