{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T09:23:02Z","timestamp":1780392182229,"version":"3.54.1"},"reference-count":45,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2024,10,15]],"date-time":"2024-10-15T00:00:00Z","timestamp":1728950400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"},{"start":{"date-parts":[[2024,10,15]],"date-time":"2024-10-15T00:00:00Z","timestamp":1728950400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"}],"funder":[{"name":"CYBAILE Inserm"},{"name":"ANR\/AID  Chaire SAIDA","award":["ANR-20-CHIA-0011"],"award-info":[{"award-number":["ANR-20-CHIA-0011"]}]},{"name":"ANR\/AID  Chaire SAIDA","award":["ANR-20-CHIA-0011"],"award-info":[{"award-number":["ANR-20-CHIA-0011"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["EURASIP J. on Info. Security"],"DOI":"10.1186\/s13635-024-00180-5","type":"journal-article","created":{"date-parts":[[2024,10,14]],"date-time":"2024-10-14T23:36:14Z","timestamp":1728948974000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":7,"title":["Strategic safeguarding: A game theoretic approach for analyzing attacker-defender behavior in DNN backdoors"],"prefix":"10.1186","volume":"2024","author":[{"given":"Kassem","family":"Kallas","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Quentin","family":"Le Roux","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wassim","family":"Hamidouche","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Teddy","family":"Furon","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2024,10,15]]},"reference":[{"key":"180_CR1","doi-asserted-by":"publisher","unstructured":"A. Voulodimos, N. Doulamis, A. Doulamis, E. Protopapadakis, D. Andina, Deep Learning for Computer Vision: A Brief Review. Intell Neuroscience\u00a0 2018(1687-5265),\u00a013 (2018) https:\/\/doi.org\/10.1155\/2018\/7068349","DOI":"10.1155\/2018\/7068349"},{"issue":"3","key":"180_CR2","doi-asserted-by":"publisher","first-page":"362","DOI":"10.1002\/rob.21918","volume":"37","author":"S Grigorescu","year":"2020","unstructured":"S. Grigorescu, B. Trasnea, T. Cocias, G. Macesanu, A survey of deep learning techniques for autonomous driving. J. Field Robot. 37(3), 362\u2013386 (2020)","journal-title":"J. Field Robot."},{"issue":"1","key":"180_CR3","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1002\/asmb.2209","volume":"33","author":"JB Heaton","year":"2017","unstructured":"J.B. Heaton, N.G. Polson, J.H. Witte, Deep learning for finance: Deep portfolios. Appl. Stoch. Model. Bus. Ind. 33(1), 3\u201312 (2017)","journal-title":"Appl. Stoch. Model. Bus. Ind."},{"issue":"6","key":"180_CR4","doi-asserted-by":"publisher","first-page":"1236","DOI":"10.1093\/bib\/bbx044","volume":"19","author":"R Miotto","year":"2018","unstructured":"R. Miotto, F. Wang, S. Wang, X. Jiang, J.T. Dudley, Deep learning for healthcare: Review, opportunities and challenges. Brief. Bioinform. 19(6), 1236\u20131246 (2018)","journal-title":"Brief. Bioinform."},{"key":"180_CR5","doi-asserted-by":"crossref","unstructured":"P.P. Shinde, S.\u00a0Shah, in 2018 Fourth international conference on computing communication control and automation (ICCUBEA), A review of machine learning and deep learning applications (IEEE, 2018), pp. 1\u20136","DOI":"10.1109\/ICCUBEA.2018.8697857"},{"key":"180_CR6","unstructured":"B. Wu, Z. Zhu, L. Liu, Q. Liu, Z. He, S. Lyu, Attacks in adversarial machine learning: A systematic survey from the life-cycle perspective (2024). https:\/\/arxiv.org\/abs\/2302.09457"},{"key":"180_CR7","unstructured":"N.M. G\u00fcrel, X.\u00a0Qi, L.\u00a0Rimanic, C.\u00a0Zhang, B.\u00a0Li, in International Conference on Machine Learning, Knowledge enhanced machine learning pipeline against diverse adversarial attacks (PMLR, 2021), pp. 3976\u20133987"},{"key":"180_CR8","doi-asserted-by":"publisher","first-page":"47433","DOI":"10.1109\/ACCESS.2024.3382584","volume":"12","author":"Q Le Roux","year":"2024","unstructured":"Q. Le Roux, E. Bourbao, Y. Teglia, K. Kallas, A comprehensive survey on backdoor attacks and their defenses in face recognition systems. IEEE Access 12, 47433\u201347468 (2024). https:\/\/doi.org\/10.1109\/ACCESS.2024.3382584","journal-title":"IEEE Access"},{"issue":"3","key":"180_CR9","doi-asserted-by":"publisher","first-page":"87","DOI":"10.1016\/j.bdr.2015.04.001","volume":"2","author":"OY Al-Jarrah","year":"2015","unstructured":"O.Y. Al-Jarrah, P.D. Yoo, S. Muhaidat, G.K. Karagiannidis, K. Taha, Efficient machine learning for big data: A review. Big Data Res. 2(3), 87\u201393 (2015)","journal-title":"Big Data Res."},{"key":"180_CR10","unstructured":"Y.\u00a0Gao, B.G. Doan, Z.\u00a0Zhang, S.\u00a0Ma, J.\u00a0Zhang, A.\u00a0Fu, S.\u00a0Nepal, H.\u00a0Kim, Backdoor attacks and countermeasures on deep learning: A comprehensive review (2020). arXiv preprint arXiv:2007.10760"},{"key":"180_CR11","doi-asserted-by":"crossref","unstructured":"W.\u00a0Guo, B.\u00a0Tondi, M.\u00a0Barni, An overview of backdoor attacks against deep neural networks and possible defences (2021). arXiv preprint arXiv:2111.08429","DOI":"10.1109\/OJSP.2022.3190213"},{"key":"180_CR12","doi-asserted-by":"publisher","unstructured":"Y. Li, Y. Jiang, Z. Li, ST. Xia, Backdoor learning: A survey. IEEE Transactions on Neural Networks and Learning Systems 35(1), 5\u201322 (2024) https:\/\/doi.org\/10.1109\/TNNLS.2022.3182979","DOI":"10.1109\/TNNLS.2022.3182979"},{"key":"180_CR13","unstructured":"X.\u00a0Chen, C.\u00a0Liu, B.\u00a0Li, K.\u00a0Lu, D.\u00a0Song, Targeted backdoor attacks on deep learning systems using data poisoning (2017). arXiv preprint arXiv:1712.05526"},{"key":"180_CR14","unstructured":"A.\u00a0Schwarzschild, M.\u00a0Goldblum, A.\u00a0Gupta, J.P. Dickerson, T.\u00a0Goldstein, in International Conference on Machine Learning, Just how toxic is data poisoning? A unified benchmark for backdoor and data poisoning attacks (PMLR, 2021), pp. 9389\u20139398"},{"key":"180_CR15","unstructured":"T. Zheng, H. Lan, B. Li, B. Be careful with pypi packages: You may unconsciously spread backdoor model weights. In: Conference on Machine Learning and Systems (2023). https:\/\/api.semanticscholar.org\/CorpusID:270796221. https:\/\/www.semanticscholar.org\/paper\/Be-Careful-with-PyPI-Packages%3A-You-May-Spread-Model-Zheng-Lan\/176c85ef19131059d4f4f517f6333d67a0ff8b8f"},{"key":"180_CR16","doi-asserted-by":"crossref","unstructured":"J.\u00a0Dumford, W.\u00a0Scheirer, in 2020 IEEE International Joint Conference on Biometrics (IJCB), Backdooring convolutional neural networks via targeted weight perturbations (IEEE, 2020), pp. 1\u20139","DOI":"10.1109\/IJCB48548.2020.9304875"},{"key":"180_CR17","doi-asserted-by":"publisher","unstructured":"H. Chen, C. Fu, J. Zhao, F. Koushanfar, Proflip: Targeted trojan attack with progressive bit flips. In: 2021 IEEE\/CVF International Conference on Computer Vision (ICCV), pp. 7698\u20137707 (2021). https:\/\/doi.org\/10.1109\/ICCV48922.2021.00762.\u00a0https:\/\/ieeexplore.ieee.org\/document\/9709910","DOI":"10.1109\/ICCV48922.2021.00762"},{"key":"180_CR18","doi-asserted-by":"crossref","unstructured":"K.\u00a0Kurita, P.\u00a0Michel, G.\u00a0Neubig, Weight poisoning attacks on pre-trained models (2020). arXiv preprint arXiv:2004.06660","DOI":"10.18653\/v1\/2020.acl-main.249"},{"key":"180_CR19","doi-asserted-by":"publisher","unstructured":"S. Wang, S. Nepal, C. Rudolph, M. Grobler, S. Chen, T. Chen, Backdoor attacks against transfer learning with pre-trained deep learning models. IEEE Transactions on Services Computing 15(3), 1526\u20131539 (2022) https:\/\/doi.org\/10.1109\/TSC.2020.3000900.\u00a0https:\/\/ieeexplore.ieee.org\/document\/9112322","DOI":"10.1109\/TSC.2020.3000900"},{"key":"180_CR20","doi-asserted-by":"crossref","unstructured":"M.\u00a0Barni, K.\u00a0Kallas, B.\u00a0Tondi, in 2019 IEEE International Conference on Image Processing (ICIP), A new backdoor attack in cnns by training set corruption without label poisoning (IEEE, 2019), pp. 101\u2013105","DOI":"10.1109\/ICIP.2019.8802997"},{"key":"180_CR21","doi-asserted-by":"crossref","unstructured":"Y.\u00a0Liu, Y.\u00a0Xie, A.\u00a0Srivastava, in 2017 IEEE International Conference on Computer Design (ICCD), Neural trojans (IEEE, 2017), pp. 45\u201348","DOI":"10.1109\/ICCD.2017.16"},{"key":"180_CR22","doi-asserted-by":"publisher","first-page":"47230","DOI":"10.1109\/ACCESS.2019.2909068","volume":"7","author":"T Gu","year":"2019","unstructured":"T. Gu, K. Liu, B. Dolan-Gavitt, S. Garg, BadNets: Evaluating backdooring attacks on deep neural networks. IEEE Access 7, 47230\u201347244 (2019)","journal-title":"IEEE Access"},{"key":"180_CR23","unstructured":"A.\u00a0Turner, D.\u00a0Tsipras, A.\u00a0Madry, Label-consistent backdoor attacks (2019). arXiv preprint arXiv:1912.02771"},{"key":"180_CR24","unstructured":"B. Wu, S. Wei, M. Zhu, M. Zheng, Z. Zhu, M. Zhang, H. Chen, D. Yuan, L. Liu, Q. Liu, Defenses in Adversarial Machine Learning: A Survey (2023). https:\/\/arxiv.org\/abs\/2312.08890"},{"key":"180_CR25","unstructured":"L.\u00a0Sun, Natural backdoor attack on text data (2020). arXiv preprint arXiv:2006.16176"},{"key":"180_CR26","doi-asserted-by":"crossref","unstructured":"X.\u00a0Sheng, Z.\u00a0Han, P.\u00a0Li, X.\u00a0Chang, A survey on backdoor attack and defense in natural language processing (2022). arXiv preprint arXiv:2211.11958","DOI":"10.1109\/QRS57517.2022.00086"},{"key":"180_CR27","doi-asserted-by":"crossref","unstructured":"Y.\u00a0Kong, J.\u00a0Zhang, Adversarial audio: A new information hiding method and backdoor for dnn-based speech recognition models (2019). arXiv preprint arXiv:1904.03829","DOI":"10.21437\/Interspeech.2020-1294"},{"key":"180_CR28","doi-asserted-by":"publisher","unstructured":"A. Bhalerao, K. Kallas, B. Tondi, M. Barni, in 2019 IEEE 21st International Workshop on Multimedia Signal Processing (MMSP), Luminance-based video backdoor attack against anti-spoofing rebroadcast detection (2019), pp. 1\u20136. https:\/\/doi.org\/10.1109\/MMSP.2019.8901711","DOI":"10.1109\/MMSP.2019.8901711"},{"key":"180_CR29","doi-asserted-by":"publisher","unstructured":"Y. Li, Y. Li, B. Wu, L. Li, R. He, S. Lyu, Invisible backdoor attack with sample-specific triggers. In: 2021 IEEE\/CVF International Conference on Computer Vision (ICCV), pp. 16443\u201316452 (2021). https:\/\/doi.org\/10.1109\/ICCV48922.2021.01615.\u00a0https:\/\/ieeexplore.ieee.org\/document\/9711191","DOI":"10.1109\/ICCV48922.2021.01615"},{"key":"180_CR30","unstructured":"B. Wang, X. Cao, J. Jia, NZ. Gong, On Certifying Robustness against Backdoor Attacks via Randomized Smoothing (2020). https:\/\/arxiv.org\/abs\/2002.11750"},{"key":"180_CR31","doi-asserted-by":"publisher","unstructured":"J. Jia, Z. Yuan, D. Sahabandu, L. Niu, A. Rajabi, B. Ramasubramanian, B. Li, R. Poovendran, Fedgame: a game-theoretic defense against backdoor attacksin federated learning. In: Proceedings of the 37th International Conference on Neural Information Processing Systems. NIPS \u201923 (Curran Associates Inc., Red Hook, NY, USA 2024), p.\u00a022. https:\/\/doi.org\/10.5555\/3666122.3668432. https:\/\/dl.acm.org\/doi\/abs\/10.5555\/3666122.3668432. Accessed 30 Sept 2024","DOI":"10.5555\/3666122.3668432"},{"key":"180_CR32","doi-asserted-by":"publisher","unstructured":"W.\u00a0Liu, S.\u00a0Chawla, in 2009 IEEE International Conference on Data Mining Workshops, A game theoretical model for adversarial learning (2009), pp. 25\u201330. https:\/\/doi.org\/10.1109\/ICDMW.2009.9","DOI":"10.1109\/ICDMW.2009.9"},{"issue":"1","key":"180_CR33","doi-asserted-by":"publisher","first-page":"291","DOI":"10.1007\/s10618-010-0197-3","volume":"22","author":"M Kantarc\u0131o\u011flu","year":"2011","unstructured":"M. Kantarc\u0131o\u011flu, B. Xi, C. Clifton, Classifier evaluation and attribute selection against active adversaries. Data Min. Knowl. Disc. 22(1), 291\u2013335 (2011)","journal-title":"Data Min. Knowl. Disc."},{"key":"180_CR34","doi-asserted-by":"publisher","unstructured":"R.\u00a0Zhang, Q.\u00a0Zhu, in 2017 51st Annual Conference on Information Sciences and Systems (CISS), A game-theoretic analysis of label flipping attacks on distributed support vector machines (2017), pp. 1\u20136. https:\/\/doi.org\/10.1109\/CISS.2017.7926118","DOI":"10.1109\/CISS.2017.7926118"},{"issue":"1","key":"180_CR35","doi-asserted-by":"publisher","first-page":"48","DOI":"10.1073\/pnas.36.1.48","volume":"36","author":"J Nash","year":"1950","unstructured":"J. Nash, Equilibrium points in n-person games. Proc. Natl. Acad. Sci. 36(1), 48\u201349 (1950)","journal-title":"Proc. Natl. Acad. Sci."},{"key":"180_CR36","doi-asserted-by":"crossref","unstructured":"M.\u00a0Jagielski, G.\u00a0Severi, N.\u00a0Pousette\u00a0Harger, A.\u00a0Oprea, in Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security, Subpopulation data poisoning attacks (2021), pp. 3104\u20133122","DOI":"10.1145\/3460120.3485368"},{"key":"180_CR37","doi-asserted-by":"publisher","unstructured":"Q. Le Roux, K. Kallas, T. Furon, Restore: Exploring a black-box defense against dnn backdoors using rare event simulation. In: 2024 IEEE Conference on Secureand Trustworthy Machine Learning (SaTML), (IEEE Computer Society, Los Alamitos, 2024). p. 286\u2013308.\u00a0https:\/\/doi.org\/10.1109\/SaTML59370.2024.00021. https:\/\/doi.ieeecomputersociety.org\/10.1109\/SaTML59370.2024.00021. https:\/\/www.computer.org\/csdl\/proceedings-article\/satml\/2024\/495000a286\/1WPEDoaiNig.\u00a0Accessed 30 Sept 2024","DOI":"10.1109\/SaTML59370.2024.00021"},{"key":"180_CR38","doi-asserted-by":"publisher","unstructured":"Y. Liu, W-C. Lee, G. Tao, S. Ma, Y. Aafer, X. Zhang, Abs: Scanning neural networks for back-doors by artificial brain stimulation. In: Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security. CCS \u201919 (Association for Computing Machinery, New York, 2019), p. 1265\u20131282. https:\/\/doi.org\/10.1145\/3319535.3363216.\u00a0https:\/\/dl.acm.org\/doi\/10.1145\/3319535.3363216","DOI":"10.1145\/3319535.3363216"},{"key":"180_CR39","doi-asserted-by":"publisher","unstructured":"W. Guo, L. Wang, Y. Xu, X. Xing, M. Du, D. Song, Tabor: Towards inspecting and eliminating trojan backdoors in deep neural networks. In: 2020 IEEE International Conference on Data Mining (ICDM), (2020),\u00a0p. 162\u2013171. https:\/\/doi.org\/10.1109\/ICDM50108.2020.00025.\u00a0https:\/\/ieeexplore.ieee.org\/document\/9338311","DOI":"10.1109\/ICDM50108.2020.00025"},{"key":"180_CR40","doi-asserted-by":"crossref","unstructured":"J.\u00a0Von\u00a0Neumann, O.\u00a0Morgenstern, Theory of games and economic behavior (Princeton University Press, 2007)","DOI":"10.1515\/9781400829460"},{"key":"180_CR41","doi-asserted-by":"publisher","unstructured":"J.C. Burguillo, Game Theory (Springer International Publishing, Cham, 2018), pp. 101\u2013135. https:\/\/doi.org\/10.1007\/978-3-319-69898-4_7","DOI":"10.1007\/978-3-319-69898-4_7"},{"key":"180_CR42","unstructured":"M.J. Osborne, A.\u00a0Rubinstein, A Course in Game Theory (MIT Press, 1994)"},{"key":"180_CR43","doi-asserted-by":"publisher","unstructured":"J. Neumann, Zur theorie der gesellschaftsspiele. Mathematische Annalen 100(1), 295\u2013320 (1928) https:\/\/doi.org\/10.1007\/BF01448847.\u00a0https:\/\/link.springer.com\/article\/10.1007\/BF01448847.\u00a0Accessed 30 Sept 2024","DOI":"10.1007\/BF01448847"},{"key":"180_CR44","unstructured":"V.\u00a0Chvatal, Linear programming (Macmillan, 1983)"},{"key":"180_CR45","unstructured":"Y. LeCun, C. Cortes, The mnist database of handwritten digits. (2005). https:\/\/api.semanticscholar.org\/CorpusID:60282629.\u00a0Accessed 30 Sept 2024"}],"container-title":["EURASIP Journal on Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s13635-024-00180-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1186\/s13635-024-00180-5\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s13635-024-00180-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,10,14]],"date-time":"2024-10-14T23:39:03Z","timestamp":1728949143000},"score":1,"resource":{"primary":{"URL":"https:\/\/jis-eurasipjournals.springeropen.com\/articles\/10.1186\/s13635-024-00180-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,10,15]]},"references-count":45,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2024,12]]}},"alternative-id":["180"],"URL":"https:\/\/doi.org\/10.1186\/s13635-024-00180-5","relation":{"has-preprint":[{"id-type":"doi","id":"10.21203\/rs.3.rs-4581873\/v1","asserted-by":"object"}]},"ISSN":["2510-523X"],"issn-type":[{"value":"2510-523X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,10,15]]},"assertion":[{"value":"14 June 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"20 September 2024","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"15 October 2024","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"Not applicable.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethics approval and consent to participate"}},{"value":"Not applicable.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Consent for publication"}},{"value":"The authors declare no competing interests.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"32"}}