{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,7]],"date-time":"2026-09-07T20:10:40Z","timestamp":1788811840743,"version":"build-2803163510"},"reference-count":112,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["62476101"],"award-info":[{"award-number":["62476101"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100021171","name":"Basic and Applied Basic Research Foundation of Guangdong Province","doi-asserted-by":"crossref","award":["2024A1515140137"],"award-info":[{"award-number":["2024A1515140137"]}],"id":[{"id":"10.13039\/501100021171","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Netw. Sci. Eng."],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/tnse.2026.3720474","type":"journal-article","created":{"date-parts":[[2026,8,4]],"date-time":"2026-08-04T19:06:45Z","timestamp":1785870405000},"page":"11081-11097","source":"Crossref","is-referenced-by-count":0,"title":["Decision Boundary Drift: A Security, Privacy, and Trust Risk of Continual Learning for Agentic AI in Edge Networks"],"prefix":"10.1109","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2180-2101","authenticated-orcid":false,"given":"Kaixiang","family":"Yang","sequence":"first","affiliation":[{"name":"South China University of Technology, and Pazhou Lab","place":["Guangzhou, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yue","family":"Xu","sequence":"additional","affiliation":[{"name":"South China University of Technology","place":["Guangzhou, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhihao","family":"Li","sequence":"additional","affiliation":[{"name":"South China University of Technology, and Pazhou Lab","place":["Guangzhou, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3140-2320","authenticated-orcid":false,"given":"Jia-Nan","family":"Liu","sequence":"additional","affiliation":[{"name":"Dongguan University of Technology","place":["Dongguan, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7208-3392","authenticated-orcid":false,"given":"Zhikun","family":"Zhang","sequence":"additional","affiliation":[{"name":"Zhejiang University","place":["Hangzhou, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7025-6365","authenticated-orcid":false,"given":"Tong","family":"Zhang","sequence":"additional","affiliation":[{"name":"South China University of Technology, and Pazhou Lab","place":["Guangzhou, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5451-7230","authenticated-orcid":false,"given":"C.L. Philip","family":"Chen","sequence":"additional","affiliation":[{"name":"South China University of Technology, and Pazhou Lab","place":["Guangzhou, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02271"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2023.3347640"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.3390\/s26041275"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01219-9_9"},{"key":"ref5","first-page":"11817","article-title":"Gradient based sample selection for online continual learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"32","author":"Aljundi","year":"2019"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2022.3197682"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2025.3555764"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2025.3629983"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01252-6_33"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2025.3544614"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2025.3545966"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"ref14","article-title":"Review of adversarial attacks and defenses on edge machine learning","author":"Chua","year":"2024"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2025.3602672"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00444"},{"key":"ref17","article-title":"An image is worth 16  16 words: Transformers for image recognition at scale","author":"Dosovitskiy","year":"2020"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00907"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2021.3073637"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2025.3620108"},{"key":"ref21","article-title":"PathNet: Evolution channels gradient descent in super neural networks","author":"Fernando","year":"2017"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58604-1_19"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.01055"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2026.3689705"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3593078.3593935"},{"key":"ref26","article-title":"Explaining and harnessing adversarial examples","author":"J Goodfellow","year":"2014"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02695"},{"key":"ref28","first-page":"6379","article-title":"Persistent backdoor attacks in continual learning","volume-title":"Proc. 34th USENIX Secur. Symp.","author":"Guo","year":"2025"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2025.3584946"},{"key":"ref31","first-page":"6629","article-title":"GANs trained by a two time-scale update rule converge to a local Nash equilibrium","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"30","author":"Heusel","year":"2017"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00092"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2025.108385"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3769811"},{"key":"ref35","first-page":"2137","article-title":"Black-box adversarial attacks with limited queries and information","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Ilyas","year":"2018"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/HPEC.2019.8916519"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2024.3384509"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/MWC.001.1900119"},{"key":"ref39","first-page":"15769","article-title":"Poisoning generative replay in continual learning to promote forgetting","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Kang","year":"2023"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2025.3567340"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1073\/pnas.1611835114"},{"key":"ref42","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref43","first-page":"2377","article-title":"SHIELD: Secure hypernetworks for incremental expansion learning defense","volume-title":"Proc. IEEE\/CVF Conf. Comput. Vis. Pattern Recognit.","author":"Krukowski","year":"2026"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-94042-7_11"},{"key":"ref45","article-title":"Adversarial machine learning at scale","author":"Kurakin","year":"2016"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2025.3555750"},{"issue":"7","key":"ref47","article-title":"Tiny ImageNet visual recognition challenge","author":"Le","year":"2015","journal-title":"CS 231N 7"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3679050"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN55064.2022.9892774"},{"key":"ref50","article-title":"PACOL: Poisoning attacks against continual learners","author":"Li","year":"2023"},{"key":"ref51","article-title":"Towards resilient federated learning in cyberedge networks: Attacks, defenses, and opportunities","author":"Li","year":"2025"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/SMC53654.2022.9945489"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2025.3568279"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2017.2773081"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/LSP.2025.3638634"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00191"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2020.2986024"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2025.3610091"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i12.29309"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52734.2025.01426"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01234-2_23"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00986"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr52688.2022.01167"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19772-7_32"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2025.3579809"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2021.10.021"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134057"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00034"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2021.3072611"},{"key":"ref71","first-page":"16805","article-title":"Diffusion models for adversarial purification","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Nie","year":"2022"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1038\/s41467-021-25858-z"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-025-11252-4"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2025.3631526"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.587"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2025.3608665"},{"key":"ref78","article-title":"Maintaining adversarial robustness in continuous learning","author":"Ru","year":"2024"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00474"},{"key":"ref80","article-title":"An introduction to the conjugate gradient method without the agonizing pain","author":"Shewchuk","year":"1994"},{"key":"ref81","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2014"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2019.2890858"},{"key":"ref83","article-title":"Defense against adversarial attacks-3rd place","author":"Thomas","year":"2017"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2021.3135565"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01623"},{"key":"ref86","first-page":"24261","article-title":"MLP-mixer: An all-MLP architecture for vision","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"34","author":"O Tolstikhin","year":"2021"},{"key":"ref87","first-page":"10347","article-title":"Training data-efficient image transformers & distillation through attention","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Touvron","year":"2021"},{"key":"ref88","article-title":"Ensemble adversarial training: Attacks and defenses","volume":"1050","author":"Tramer","year":"2018","journal-title":"Stat"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2023.02.001"},{"key":"ref90","first-page":"3637","article-title":"Matching networks for one shot learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"29","author":"Vinyals","year":"2016"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2025.3565302"},{"key":"ref92","first-page":"22379","article-title":"AFEC: Active forgetting of negative transfer in continual learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"34","author":"Wang","year":"2021"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2024.3367329"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.52202\/068431-0411"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.52202\/068431-1481"},{"key":"ref96","article-title":"Improving data-aware and parameter-aware robustness for continual learning","author":"Xiao","year":"2024"},{"key":"ref97","article-title":"Mitigating adversarial effects through randomization","author":"Xie","year":"2017"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00284"},{"key":"ref99","article-title":"Exploring and exploiting decision boundary dynamics for adversarial robustness","author":"Xu","year":"2023"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2024.3524609"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1109\/tcss.2025.3632830"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2020.3040247"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.52202\/068431-0548"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1016\/j.artmed.2025.103319"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00068"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2025.3582501"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2022.3223944"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2025.3621865"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52734.2025.00944"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2025.3578860"},{"key":"ref111","article-title":"Backdoor attacks against incremental learners: An empirical evaluation study","author":"Zhong","year":"2023"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02290"}],"container-title":["IEEE Transactions on Network Science and Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6488902\/11264281\/11641034.pdf?arnumber=11641034","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,9,7]],"date-time":"2026-09-07T19:20:33Z","timestamp":1788808833000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11641034\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":112,"URL":"https:\/\/doi.org\/10.1109\/tnse.2026.3720474","relation":{},"ISSN":["2327-4697"],"issn-type":[{"value":"2327-4697","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}