{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T16:03:58Z","timestamp":1780589038482,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":68,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["2431595"],"award-info":[{"award-number":["2431595"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["2315612"],"award-info":[{"award-number":["2315612"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["2332638"],"award-info":[{"award-number":["2332638"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,6]]},"DOI":"10.1145\/3779208.3806081","type":"proceedings-article","created":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T15:21:58Z","timestamp":1780586518000},"page":"591-607","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Deep Learning Backdoor Defense via Adaptive Trigger Collisions in Latent Space"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0004-7318-2084","authenticated-orcid":false,"given":"Zixun","family":"Xiong","sequence":"first","affiliation":[{"name":"Stevens Institute of Technology, Hoboken, New York, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1444-2657","authenticated-orcid":false,"given":"Hao","family":"Wang","sequence":"additional","affiliation":[{"name":"Stevens Institue of Technology, Hoboken, New Jersey, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3642-3569","authenticated-orcid":false,"given":"Jian","family":"Li","sequence":"additional","affiliation":[{"name":"Stony Brook University, Stony Brook, New York, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5536-503X","authenticated-orcid":false,"given":"Yang","family":"Hua","sequence":"additional","affiliation":[{"name":"Queen's University Belfast, Belfast, Northern Ireland, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2138-4413","authenticated-orcid":false,"given":"Miao","family":"Pan","sequence":"additional","affiliation":[{"name":"University of Houston, Houston, Texas, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4235-9671","authenticated-orcid":false,"given":"Xiaojiang","family":"Du","sequence":"additional","affiliation":[{"name":"Stevens Institute of Technology, Hoboken, New Jersey, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,6,4]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"An image is worth 16x16 words: Transformers for image recognition at scale. arXiv preprint arXiv","author":"Alexey Dosovitskiy","year":"2010","unstructured":"Dosovitskiy Alexey. 2020. An image is worth 16x16 words: Transformers for image recognition at scale. arXiv preprint arXiv: 2010.11929 (2020)."},{"key":"e_1_3_2_1_2_1","volume-title":"Proc .30th USENIX Security Symposium (USENIX Security 21)","author":"Bagdasaryan Eugene","year":"2021","unstructured":"Eugene Bagdasaryan and Vitaly Shmatikov. 2021. Blind backdoors in deep learning models. In Proc .30th USENIX Security Symposium (USENIX Security 21)."},{"key":"e_1_3_2_1_3_1","volume-title":"Proc. 26th IEEE International Conference on Image Processing (ICIP).","author":"Barni Mauro","year":"2019","unstructured":"Mauro Barni, Kassem Kallas, and Benedetta Tondi. 2019. A new backdoor attack in cnns by training set corruption without label poisoning. In Proc. 26th IEEE International Conference on Image Processing (ICIP)."},{"key":"e_1_3_2_1_4_1","volume-title":"Proc. 33th Conference on Artificial Intelligence Workshop (AAAI Workshop).","author":"Chen Bryant","year":"2018","unstructured":"Bryant Chen, Wilka Carvalho, Nathalie Baracaldo, Heiko Ludwig, Benjamin Edwards, Taesung Lee, Ian Molloy, and Biplav Srivastava. 2018. Detecting backdoor attacks on deep neural networks by activation clustering. In Proc. 33th Conference on Artificial Intelligence Workshop (AAAI Workshop)."},{"key":"e_1_3_2_1_5_1","volume-title":"IJCAI","volume":"2","author":"Chen Huili","year":"2019","unstructured":"Huili Chen, Cheng Fu, Jishen Zhao, and Farinaz Koushanfar. 2019. Deepinspect: A black-box trojan detection and mitigation framework for deep neural networks. In IJCAI, Vol. 2.8."},{"key":"e_1_3_2_1_6_1","volume-title":"Targeted backdoor attacks on deep learning systems using data poisoning. arXiv preprint arXiv:1712.05526","author":"Chen Xinyun","year":"2017","unstructured":"Xinyun Chen, Chang Liu, Bo Li, Kimberly Lu, and Dawn Song. 2017. Targeted backdoor attacks on deep learning systems using data poisoning. arXiv preprint arXiv:1712.05526 (2017)."},{"key":"e_1_3_2_1_7_1","volume-title":"Refine: Inversion-free backdoor defense via model reprogramming. arXiv preprint arXiv:2502.18508","author":"Chen Yukun","year":"2025","unstructured":"Yukun Chen, Shuo Shao, Enhao Huang, Yiming Li, Pin-Yu Chen, Zhan Qin, and Kui Ren. 2025. Refine: Inversion-free backdoor defense via model reprogramming. arXiv preprint arXiv:2502.18508 (2025)."},{"key":"e_1_3_2_1_8_1","volume-title":"Proceedings of the AAAI Conference on Artificial Intelligence","volume":"38","author":"Chen Yiming","year":"2024","unstructured":"Yiming Chen, Haiwei Wu, and Jiantao Zhou. 2024. Progressive poisoned data isolation for training-time backdoor defense. In Proceedings of the AAAI Conference on Artificial Intelligence, Vol. 38. 11425\u201311433."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2023.3261988"},{"key":"e_1_3_2_1_10_1","volume-title":"Adam: A method for stochastic optimization. (No Title)","author":"Diederik P Kingma","year":"2014","unstructured":"P Kingma Diederik. 2014. Adam: A method for stochastic optimization. (No Title) (2014)."},{"key":"e_1_3_2_1_11_1","volume-title":"Proc. 22nd Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR).","author":"Gao Kuofeng","year":"2023","unstructured":"Kuofeng Gao, Yang Bai, Jindong Gu, Yong Yang, and Shu-Tao Xia. 2023. Backdoor defense via adaptively splitting poisoned dataset. In Proc. 22nd Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)."},{"key":"e_1_3_2_1_12_1","article-title":"Design and evaluation of a multi-domain trojan detection method on deep neural networks. In Proc","author":"Gao Yansong","year":"2021","unstructured":"Yansong Gao, Yeonjae Kim, Bao Gia Doan, Zhi Zhang, Gongxuan Zhang, Surya Nepal, Damith C Ranasinghe, and Hyoungshick Kim. 2021. Design and evaluation of a multi-domain trojan detection method on deep neural networks. In Proc. IEEE Transactions on Dependable and Secure Computing (DSC).","journal-title":"IEEE Transactions on Dependable and Secure Computing (DSC)."},{"key":"e_1_3_2_1_13_1","volume-title":"Proc. 35th Annual Computer Security Applications Conference (ACSAC).","author":"Gao Yansong","year":"2019","unstructured":"Yansong Gao, Change Xu, Derui Wang, Shiping Chen, Damith C Ranasinghe, and Surya Nepal. 2019. STRIP: A Defence Against Trojan Attacks on Deep Neural Networks. In Proc. 35th Annual Computer Security Applications Conference (ACSAC)."},{"key":"e_1_3_2_1_14_1","volume-title":"Texture synthesis using convolutional neural networks. Advances in neural information processing systems 28","author":"Gatys Leon","year":"2015","unstructured":"Leon Gatys, Alexander S Ecker, and Matthias Bethge. 2015. Texture synthesis using convolutional neural networks. Advances in neural information processing systems 28 (2015)."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"e_1_3_2_1_16_1","volume-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. 24564\u201324573","author":"Guan Jiyang","year":"2024","unstructured":"Jiyang Guan, Jian Liang, and Ran He. 2024. Backdoor Defense via Test-Time Detecting and Repairing. In Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. 24564\u201324573."},{"key":"e_1_3_2_1_17_1","volume-title":"Proc. 11th International Conference on Learning Representations (ICLR).","author":"Guo Junfeng","year":"2023","unstructured":"Junfeng Guo, Yiming Li, Xun Chen, Hanqing Guo, Lichao Sun, and Cong Liu. 2023. Scale-up: An efficient black-box input-level backdoor detection via analyzing scaled prediction consistency. In Proc. 11th International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"crossref","first-page":"111174","DOI":"10.1016\/j.patcog.2024.111174","article-title":"Deep learning-enhanced environment perception for autonomous driving: MDNet with CSP-DarkNet53","volume":"160","author":"Guo Xuyao","year":"2025","unstructured":"Xuyao Guo, Feng Jiang, Quanzhen Chen, Yuxuan Wang, Kaiyue Sha, and Jing Chen. 2025. Deep learning-enhanced environment perception for autonomous driving: MDNet with CSP-DarkNet53. Pattern Recognition 160 (2025), 111174.","journal-title":"Pattern Recognition"},{"key":"e_1_3_2_1_19_1","volume-title":"Proc. 29th Proceedings of the IEEE conference on computer vision and pattern recognition (CVPR).","author":"He Kaiming","year":"2016","unstructured":"Kaiming He, Xiangyu Zhang, Shaoqing Ren, and Jian Sun. 2016. Deep residual learning for image recognition. In Proc. 29th Proceedings of the IEEE conference on computer vision and pattern recognition (CVPR)."},{"key":"e_1_3_2_1_20_1","volume-title":"Proc. 41st The International Conference on Machine Learning (ICML).","author":"Hou Linshan","year":"2024","unstructured":"Linshan Hou, Ruili Feng, Zhongyun Hua, Wei Luo, Leo Yu Zhang, and Yiming Li. 2024. IBD-PSC: Input-level Backdoor Detection via Parameter-oriented Scaling Consistency. In Proc. 41st The International Conference on Machine Learning (ICML)."},{"key":"e_1_3_2_1_21_1","volume-title":"Backdoor defense via decoupling the training process. arXiv preprint arXiv:2202.03423","author":"Huang Kunzhe","year":"2022","unstructured":"Kunzhe Huang, YimingLi, Baoyuan Wu, Zhan Qin, and Kui Ren. 2022. Backdoor defense via decoupling the training process. arXiv preprint arXiv:2202.03423 (2022)."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3673224"},{"key":"e_1_3_2_1_23_1","volume-title":"Tiny imagenet visual recognition challenge. CS 231N 7, 7","author":"Le Ya","year":"2015","unstructured":"Ya Le and Xuan Yang. 2015. Tiny imagenet visual recognition challenge. CS 231N 7, 7 (2015), 3."},{"key":"e_1_3_2_1_24_1","volume-title":"Proc. 33th Advances in Neural Information Processing Systems (NeurIPS).","author":"Li Ke","year":"2019","unstructured":"Ke Li, Tianhao Zhang, and Jitendra Malik. 2019. Approximate feature collisions in neural nets. In Proc. 33th Advances in Neural Information Processing Systems (NeurIPS)."},{"key":"e_1_3_2_1_25_1","volume-title":"Backdoor learning: A survey","author":"Li Yiming","year":"2022","unstructured":"Yiming Li, Yong Jiang, Zhifeng Li, and Shu-Tao Xia. 2022. Backdoor learning: A survey. IEEE Transactions on Neural Networks and Learning Systems (2022)."},{"key":"e_1_3_2_1_26_1","volume-title":"Proc. 18th th the IEEE\/CVF international conference on computer vision(ICCV).","author":"Li Yuezun","year":"2021","unstructured":"Yuezun Li, Yiming Li, Baoyuan Wu, Longkang Li, Ran He, and Siwei Lyu. 2021. Invisible backdoor attack with sample-specific triggers. In Proc. 18th th the IEEE\/CVF international conference on computer vision(ICCV)."},{"key":"e_1_3_2_1_27_1","volume-title":"Proc. 35th Advances in Neural Information Processing Systems (NeurIPS).","author":"Li Yige","year":"2021","unstructured":"Yige Li, Xixiang Lyu, Nodens Koren, Lingjuan Lyu, Bo Li, and Xingjun Ma. 2021. Anti-Backdoor Learning: Training Clean Models on Poisoned Data. In Proc. 35th Advances in Neural Information Processing Systems (NeurIPS)."},{"key":"e_1_3_2_1_28_1","volume-title":"Proc. 9th International Conference on Learning Representations(ICLR).","author":"Li Yige","year":"2021","unstructured":"Yige Li, Xixiang Lyu, Nodens Koren, Lingjuan Lyu, Bo Li, and Xingjun Ma. 2021. Neural attention distillation: Erasing backdoor triggers from deep neural networks. In Proc. 9th International Conference on Learning Representations(ICLR)."},{"key":"e_1_3_2_1_29_1","volume-title":"BackdoorBox: A Python Toolbox for Backdoor Learning. In ICLR Workshop.","author":"Li Yiming","year":"2023","unstructured":"Yiming Li, Mengxi Ya, Yang Bai, Yong Jiang, and Shu-Tao Xia. 2023. BackdoorBox: A Python Toolbox for Backdoor Learning. In ICLR Workshop."},{"key":"e_1_3_2_1_30_1","volume-title":"ICLR Workshop.","author":"Li Yiming","year":"2021","unstructured":"Yiming Li, Tongqing Zhai, Yong Jiang, Zhifeng Li, and Shu-Tao Xia. 2021. Backdoor attack in the physical world. In ICLR Workshop."},{"key":"e_1_3_2_1_31_1","volume-title":"Proc. 21st International symposium on research in attacks, intrusions, and defenses (RAID).","author":"Liu Kang","year":"2018","unstructured":"Kang Liu, Brendan Dolan-Gavitt, and Siddharth Garg. 2018. Fine-pruning: Defending against backdooring attacks on deep neural networks. In Proc. 21st International symposium on research in attacks, intrusions, and defenses (RAID)."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3043716"},{"key":"e_1_3_2_1_33_1","volume-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision. 4620\u20134629","author":"Liu Min","year":"2023","unstructured":"Min Liu, Alberto Sangiovanni-Vincentelli, and Xiangyu Yue. 2023. Beating backdoor attack at its own game. In Proceedings of the IEEE\/CVF International Conference on Computer Vision. 4620\u20134629."},{"key":"e_1_3_2_1_34_1","first-page":"23818","article-title":"Efficient training of visual transformers with small datasets","volume":"34","author":"Liu Yahui","year":"2021","unstructured":"Yahui Liu, Enver Sangineto, Wei Bi, Nicu Sebe, Bruno Lepri, and Marco Nadai. 2021. Efficient training of visual transformers with small datasets. Advances in Neural Information Processing Systems 34 (2021), 23818\u201323830.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCD.2017.16"},{"key":"e_1_3_2_1_36_1","volume-title":"Proc. 9th International Conference on Learning Representations (ICLR).","author":"Nguyen Anh","year":"2021","unstructured":"Anh Nguyen and Anh Tran. 2021. WaNet-Imperceptible Warping-based Backdoor Attack. In Proc. 9th International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_1_37_1","first-page":"3454","article-title":"Input-aware dynamic backdoor attack","volume":"33","author":"Nguyen Tuan Anh","year":"2020","unstructured":"Tuan Anh Nguyen and Anh Tran. 2020. Input-aware dynamic backdoor attack. Advances in Neural Information Processing Systems 33 (2020), 3454\u20133464.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_1_38_1","volume-title":"Wesley De Neve, and Arnout Van Messem","author":"Ozbulak Utku","year":"2022","unstructured":"Utku Ozbulak, Manvel Gasparyan, Shodhan Rao, Wesley De Neve, and Arnout Van Messem. 2022. Exact Feature Collisions in Neural Networks. arXiv preprint arXiv:2205.15763 (2022)."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"crossref","first-page":"10","DOI":"10.1186\/s13635-024-00158-3","article-title":"Machine learning security and privacy: a review of threats and countermeasures","volume":"2024","author":"Paracha Anum","year":"2024","unstructured":"Anum Paracha, Junaid Arshad, Mohamed Ben Farah, and Khalid Ismail. 2024. Machine learning security and privacy: a review of threats and countermeasures. EURASIP Journal on Information Security 2024, 1 (2024), 10.","journal-title":"EURASIP Journal on Information Security"},{"key":"e_1_3_2_1_40_1","volume-title":"Onion: A simple and effective defense against textual backdoor attacks. arXiv preprint arXiv:2011.10369","author":"Qi Fanchao","year":"2020","unstructured":"Fanchao Qi, Yangyi Chen, Mukai Li, Yuan Yao, Zhiyuan Liu, and Maosong Sun. 2020. Onion: A simple and effective defense against textual backdoor attacks. arXiv preprint arXiv:2011.10369 (2020)."},{"key":"e_1_3_2_1_41_1","volume-title":"Proc. 32nd Advances in Neural Information Processing Systems (NeurIPS).","author":"Qiao Ximing","year":"2019","unstructured":"Ximing Qiao, Yukun Yang, and Hai Li. 2019. Defending neural backdoors via generative distribution modeling. In Proc. 32nd Advances in Neural Information Processing Systems (NeurIPS)."},{"key":"e_1_3_2_1_42_1","volume-title":"2024 IEEE Symposium on Security and Privacy (SP). IEEE, 2124\u20132141","author":"Qiu Huming","year":"2024","unstructured":"Huming Qiu, Junjie Sun, Mi Zhang, Xudong Pan, and Min Yang. 2024. BELT: Old-School Backdoor Attacks can Evade the State-of-the-Art Defense with Backdoor Exclusivity Lifting. In 2024 IEEE Symposium on Security and Privacy (SP). IEEE, 2124\u20132141."},{"key":"e_1_3_2_1_43_1","volume-title":"Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security. 2232\u20132246","author":"Rajabi Arezoo","year":"2023","unstructured":"Arezoo Rajabi, Surudhi Asokraj, Fengqing Jiang, Luyao Niu, Bhaskar Ramasubramanian, James Ritcey, and Radha Poovendran. 2023. MDTD: A Multi-Domain Trojan Detector for Deep Neural Networks. In Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security. 2232\u20132246."},{"key":"e_1_3_2_1_44_1","volume-title":"U-net: Convolutional networks for biomedical image segmentation. In Medical image computing and computer-assisted intervention-MICCAI 2015:18th international conference","author":"Ronneberger Olaf","year":"2015","unstructured":"Olaf Ronneberger, Philipp Fischer, and Thomas Brox. 2015. U-net: Convolutional networks for biomedical image segmentation. In Medical image computing and computer-assisted intervention-MICCAI 2015:18th international conference, Munich, Germany, October 5-9, 2015, proceedings, part III 18. Springer, 234\u2013241."},{"key":"e_1_3_2_1_45_1","volume-title":"Proc. 33th AAAI conference on artificial intelligence.","author":"Saha Aniruddha","year":"2020","unstructured":"Aniruddha Saha, Akshayvarun Subramanya, and Hamed Pirsiavash. 2020. Hidden trigger backdoor attacks. In Proc. 33th AAAI conference on artificial intelligence."},{"key":"e_1_3_2_1_46_1","volume-title":"Proc. 16th Proceedings of the IEEE international conference on computer vision (ICCV).","author":"Selvaraju Ramprasaath R","year":"2017","unstructured":"Ramprasaath R Selvaraju, Michael Cogswell, Abhishek Das, Ramakrishna Vedantam, Devi Parikh, and Dhruv Batra. 2017. Grad-cam: Visual explanations from deep networks via gradient-based localization. In Proc. 16th Proceedings of the IEEE international conference on computer vision (ICCV)."},{"key":"e_1_3_2_1_47_1","volume-title":"Proc. 32th Advances in Neural Information Processing Systems (NeurIPS).","author":"Shafahi Ali","year":"2018","unstructured":"Ali Shafahi, W Ronny Huang, Mahyar Najibi, Octavian Suciu, Christoph Studer, Tudor Dumitras, and Tom Goldstein. 2018. Poison frogs! targeted clean-label poisoning attacks on neural networks. In Proc. 32th Advances in Neural Information Processing Systems (NeurIPS)."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833688"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1007\/BF02288916"},{"key":"e_1_3_2_1_50_1","volume-title":"Proc. 32th Advances in Neural Information Processing Systems (NeurIPS).","author":"Tran Brandon","unstructured":"Brandon Tran, Jerry Li, and Aleksander Madry. 201 . Spectral signatures in backdoor attacks. In Proc. 32th Advances in Neural Information Processing Systems (NeurIPS)."},{"key":"e_1_3_2_1_51_1","unstructured":"Alexander Turner Dimitris Tsipras and Aleksander Madry. 201 . Clean-label backdoor attacks. (2018)."},{"key":"e_1_3_2_1_52_1","volume-title":"Proc. 40th IEEE symposium on security and privacy (SP).","author":"Wang Bolun","year":"2019","unstructured":"Bolun Wang, Yuanshun Yao, Shawn Shan, Huiying Li, Bimal Viswanath, Haitao Zheng, and Ben Y Zhao. 2019. Neural cleanse: Identifying and mitigating backdoor attacks in neural networks. In Proc. 40th IEEE symposium on security and privacy (SP)."},{"key":"e_1_3_2_1_53_1","volume-title":"A Practical Trigger-Free Backdoor Attack on Neural Networks. arXiv preprint arXiv:2408.11444","author":"Wang Jiahao","year":"2024","unstructured":"Jiahao Wang, Xianglong Zhang, Xiuzhen Cheng, Pengfei Hu, and Guoming Zhang. 2024. A Practical Trigger-Free Backdoor Attack on Neural Networks. arXiv preprint arXiv:2408.11444 (2024)."},{"key":"e_1_3_2_1_54_1","volume-title":"Proc. 16th European Conference on Computer Vision (ECCV).","author":"Wang Ren","year":"2020","unstructured":"Ren Wang, Gaoyuan Zhang, Sijia Liu, Pin-Yu Chen, Jinjun Xiong, and Meng Wang. 2020. Practical Detection of Trojan Neural Networks: Data-Limited and Data-Free Cases. In Proc. 16th European Conference on Computer Vision (ECCV)."},{"key":"e_1_3_2_1_55_1","volume-title":"Unicorn: A unified backdoor trigger inversion framework. arXiv preprint arXiv:2304.02786","author":"Wang Zhenting","year":"2023","unstructured":"Zhenting Wang, Kai Mei, Juan Zhai, and Shiqing Ma. 2023. Unicorn: A unified backdoor trigger inversion framework. arXiv preprint arXiv:2304.02786 (2023)."},{"key":"e_1_3_2_1_56_1","volume-title":"Mitigating backdoor attack by injecting proactive defensive backdoor. arXiv preprint arXiv:2405.16112","author":"Wei Shaokui","year":"2024","unstructured":"Shaokui Wei, Hongyuan Zha, and Baoyuan Wu. 2024. Mitigating backdoor attack by injecting proactive defensive backdoor. arXiv preprint arXiv:2405.16112 (2024)."},{"key":"e_1_3_2_1_57_1","volume-title":"Proc. 37th Advances in Neural Information Processing Systems (NeurIPS).","author":"Wei Shaokui","year":"2023","unstructured":"Shaokui Wei, Mingda Zhang, Hongyuan Zha, and Baoyuan Wu. 2023. Shared adversarial unlearning: Backdoor mitigation by unlearning shared adversarial examples. In Proc. 37th Advances in Neural Information Processing Systems (NeurIPS)."},{"key":"e_1_3_2_1_58_1","volume-title":"Proc. 36th Conference on Neural Information Processing Systems Datasets and Benchmarks Track (NeurIPS).","author":"Wu Baoyuan","year":"2022","unstructured":"Baoyuan Wu, Hongrui Chen, Mingda Zhang, Zihao Zhu, Shaokui Wei, Danni Yuan, and Chao Shen. 2022. BackdoorBench: A Comprehensive Benchmark of Backdoor Learning. In Proc. 36th Conference on Neural Information Processing Systems Datasets and Benchmarks Track (NeurIPS)."},{"key":"e_1_3_2_1_59_1","volume-title":"Proc. 48th IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP).","author":"Xu Tong","year":"2023","unstructured":"Tong Xu, Yiming Li, Yong Jiang, and Shu-Tao Xia. 2023. Batt: Backdoor attack with transformation-based triggers. In Proc. 48th IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)."},{"key":"e_1_3_2_1_60_1","volume-title":"The Twelfth International Conference on Learning Representations.","author":"Xu Xiong","year":"2024","unstructured":"Xiong Xu, Kunzhe Huang, Yiming Li, Zhan Qin, and Kui Ren. 2024. Towards reliable and efficient backdoor trigger inversion via decoupling benign features. In The Twelfth International Conference on Learning Representations."},{"key":"e_1_3_2_1_61_1","volume-title":"Proc. 8th International Conference on Learning Representations (ICLR).","author":"Zeng Yi","year":"2020","unstructured":"Yi Zeng, Si Chen, Won Park, Z Morley Mao, Ming Jin, and Ruoxi Jia. 2020. Adversarial unlearning of backdoors via implicit hypergradient. In Proc. 8th International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3616617"},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01177"},{"key":"e_1_3_2_1_64_1","volume-title":"Proc. 9th International Conference on Learning Representations (ICLR).","author":"Zhao Pu","year":"2021","unstructured":"Pu Zhao, Pin-Yu Chen, Payel Das, Karthikeyan Natesan Ramamurthy, and Xue Lin. 2021. Bridging mode connectivity in loss landscapes and adversarial robustness. In Proc. 9th International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-20065-6_11"},{"key":"e_1_3_2_1_66_1","volume-title":"Imperceptible backdoor attack: From input space to feature representation. arXiv preprint arXiv:2205.03190","author":"Zhong Nan","year":"2022","unstructured":"Nan Zhong, Zhenxing Qian, and Xinpeng Zhang. 2022. Imperceptible backdoor attack: From input space to feature representation. arXiv preprint arXiv:2205.03190 (2022)."},{"key":"e_1_3_2_1_67_1","volume-title":"Proc. 19th CVF International Conference on Computer Vision (ICCV).","author":"Zhu Mingli","year":"2023","unstructured":"Mingli Zhu, Shaokui Wei, Li Shen, Yanbo Fan, and Baoyuan Wu. 2023. Enhancing fine-tuning based backdoor defense with sharpness-aware minimization. In Proc. 19th CVF International Conference on Computer Vision (ICCV)."},{"key":"e_1_3_2_1_68_1","volume-title":"Proc. 38th Advances in Neural Information Processing Systems (NeurIPS).","author":"Zhu Mingli","year":"2024","unstructured":"Mingli Zhu, Shaokui Wei, Hongyuan Zha, and Baoyuan Wu. 2024. Neural polarizer: A lightweight and effective backdoor defense via purifying poisoned features. In Proc. 38th Advances in Neural Information Processing Systems (NeurIPS)."}],"event":{"name":"ASIA CCS '26: ACM Asia Conference on Computer and Communications Security","location":"Bangalore India","acronym":"ASIA CCS '26","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the ACM Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3779208.3806081","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3779208.3806081","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T15:44:26Z","timestamp":1780587866000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3779208.3806081"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6]]},"references-count":68,"alternative-id":["10.1145\/3779208.3806081","10.1145\/3779208"],"URL":"https:\/\/doi.org\/10.1145\/3779208.3806081","relation":{},"subject":[],"published":{"date-parts":[[2026,6]]},"assertion":[{"value":"2026-06-04","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}