{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,17]],"date-time":"2026-03-17T07:59:45Z","timestamp":1773734385548,"version":"3.50.1"},"reference-count":36,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Serv. Comput."],"published-print":{"date-parts":[[2022,5,1]]},"DOI":"10.1109\/tsc.2020.3000900","type":"journal-article","created":{"date-parts":[[2020,6,9]],"date-time":"2020-06-09T20:40:02Z","timestamp":1591735202000},"page":"1526-1539","source":"Crossref","is-referenced-by-count":75,"title":["Backdoor Attacks Against Transfer Learning With Pre-Trained Deep Learning Models"],"prefix":"10.1109","volume":"15","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8938-2364","authenticated-orcid":false,"given":"Shuo","family":"Wang","sequence":"first","affiliation":[{"name":"Faculty of Information Technology, Monash University, Clayton, VIC, Australia"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3289-6599","authenticated-orcid":false,"given":"Surya","family":"Nepal","sequence":"additional","affiliation":[{"name":"CSIRO's Data61, Melbourne, VIC, Australia"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9050-5675","authenticated-orcid":false,"given":"Carsten","family":"Rudolph","sequence":"additional","affiliation":[{"name":"Faculty of Information Technology, Monash University, Melbourne, VIC, Australia"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6933-0145","authenticated-orcid":false,"given":"Marthie","family":"Grobler","sequence":"additional","affiliation":[{"name":"CSIRO's Data61, Melbourne, VIC, Australia"}]},{"given":"Shangyu","family":"Chen","sequence":"additional","affiliation":[{"name":"University of Melbourne, Melbourne, VIC, Australia"}]},{"given":"Tianle","family":"Chen","sequence":"additional","affiliation":[{"name":"Faculty of Information Technology, Monash University, Melbourne, VIC, Australia"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.31525\/fda2-ucm604357.htm"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TSUSC.2018.2881416"},{"key":"ref3","first-page":"1281","article-title":"With great training comes great vulnerability: Practical attacks against transfer learning","volume-title":"Proc. 27th USENIX Secur. Symp.","author":"Wang"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2013.50"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v31i1.11014"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/s00607-019-00708-5"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2009.191"},{"key":"ref8","first-page":"1281","article-title":"With great training comes great vulnerability: Practical attacks against transfer learning","volume-title":"Proc. 27th USENIX Secur. Symp.","author":"Wang"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3144988"},{"key":"ref10","first-page":"1135","article-title":"Learning both weights and connections for efficient neural networks","volume-title":"Proc. 28th Int. Conf. Neural Inf. Process. Syst.","author":"Han"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2015.2494536"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ICCD.2017.16"},{"key":"ref15","article-title":"Deep compression: Compressing deep neural networks with pruning, trained quantization and Huffman coding","author":"Han","year":"2016"},{"key":"ref16","article-title":"Pruning filters for efficient convnets","author":"Li","year":"2017"},{"key":"ref17","article-title":"Pruning convolutional neural networks for resource efficient inference","author":"Molchanov","year":"2017"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-46145-0_17"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CNS.2017.8228656"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23220"},{"key":"ref21","article-title":"PoTrojan: Powerful neural-level trojan designs in deep learning models","author":"Zou","year":"2018"},{"key":"ref22","article-title":"Poisoning attacks against support vector machines","author":"Biggio","year":"2012"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2014.08.081"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140451"},{"key":"ref25","first-page":"1689","article-title":"Is feature selection secure against training data poisoning?","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Xiao"},{"key":"ref26","article-title":"Generative poisoning attack method against neural networks","author":"Yang","year":"2017"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"ref28","article-title":"Targeted backdoor attacks on deep learning systems using data poisoning","author":"Chen","year":"2017"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354209"},{"key":"ref30","first-page":"6103","article-title":"Poison frogs! Targeted clean-label poisoning attacks on neural networks","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Shafahi"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134057"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23198"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.5555\/2946645.2946704"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.241"}],"container-title":["IEEE Transactions on Services Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/4629386\/9799728\/09112322.pdf?arnumber=9112322","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,9]],"date-time":"2024-01-09T22:31:37Z","timestamp":1704839497000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9112322\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,5,1]]},"references-count":36,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/tsc.2020.3000900","relation":{},"ISSN":["1939-1374","2372-0204"],"issn-type":[{"value":"1939-1374","type":"electronic"},{"value":"2372-0204","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,5,1]]}}}