@inproceedings{bb162100,
        AUTHOR = "Liu, Z. and Zhang, H.",
        TITLE = "Stealthy Backdoor Attack in Self-Supervised Learning Vision Encoders
for Large Vision Language Models",
        BOOKTITLE = CVPR25,
        YEAR = "2025",
        PAGES = "25060-25070",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157953"}

@inproceedings{bb162101,
        AUTHOR = "Zhang, H. and Wang, Y.C. and Yan, S.H. and Zhu, C.Y. and Zhou, Z.Q. and Hou, L.S. and Hu, S. and Li, M.H. and Zhang, Y.J. and Zhang, L.Y.",
        TITLE = "Test-Time Backdoor Detection for Object Detection Models",
        BOOKTITLE = CVPR25,
        YEAR = "2025",
        PAGES = "24377-24386",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157954"}

@inproceedings{bb162102,
        AUTHOR = "Hou, S.Z. and Li, S.Z. and Yao, D.",
        TITLE = "DeDe: Detecting Backdoor Samples for SSL Encoders via Decoders",
        BOOKTITLE = CVPR25,
        YEAR = "2025",
        PAGES = "20675-20684",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157955"}

@inproceedings{bb162103,
        AUTHOR = "Xu, J.H. and Zhang, Z.K. and Hu, R.",
        TITLE = "Detecting Backdoor Attacks in Federated Learning via Direction
Alignment Inspection",
        BOOKTITLE = CVPR25,
        YEAR = "2025",
        PAGES = "20654-20664",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157956"}

@inproceedings{bb162104,
        AUTHOR = "Han, Y.N. and Zhao, B.Y. and Chu, R. and Luo, F. and Sikdar, B. and Lao, Y.J.",
        TITLE = "UIBDiffusion: Universal Imperceptible Backdoor Attack for Diffusion
Models",
        BOOKTITLE = CVPR25,
        YEAR = "2025",
        PAGES = "19186-19196",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157957"}

@inproceedings{bb162105,
        AUTHOR = "Li, W. and Chen, P.Y. and Liu, S. and Wang, R.",
        TITLE = "PSBD: Prediction Shift Uncertainty Unlocks Backdoor Detection",
        BOOKTITLE = CVPR25,
        YEAR = "2025",
        PAGES = "10255-10264",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157958"}

@inproceedings{bb162106,
        AUTHOR = "Liang, S.Y. and Liang, J.W. and Pang, T.Y. and Du, C. and Liu, A. and Zhu, M.L. and Cao, X.C. and Tao, D.C.",
        TITLE = "Revisiting Backdoor Attacks against Large Vision-Language Models from
Domain Shift",
        BOOKTITLE = CVPR25,
        YEAR = "2025",
        PAGES = "9477-9486",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157959"}

@inproceedings{bb162107,
        AUTHOR = "Lee, C.Y. and Kao, C.C. and Yeh, C.H. and Lu, C.S. and Yu, C.M. and Chen, C.S.",
        TITLE = "Defending Against Repetitive Backdoor Attacks on Semi-Supervised
Learning Through Lens of Rate-Distortion-Perception Trade-Off",
        BOOKTITLE = WACV25,
        YEAR = "2025",
        PAGES = "6465-6474",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157960"}

@inproceedings{bb162108,
        AUTHOR = "Nagaonkar, S. and Tripathi, A.M. and Mishra, A.",
        TITLE = "When Visual State Space Model Meets Backdoor Attacks",
        BOOKTITLE = WACV25,
        YEAR = "2025",
        PAGES = "7419-7428",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157961"}

@inproceedings{bb162109,
        AUTHOR = "Styborski, J. and Lyu, M.Z. and Huang, Y. and Kong, A.",
        TITLE = "Exploiting Supervised Poison Vulnerability to Strengthen
Self-supervised Defense",
        BOOKTITLE = ECCV24,
        YEAR = "2024",
        PAGES = "LXXXII: 265-283",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157962"}

@inproceedings{bb162110,
        AUTHOR = "Fares, S. and Nandakumar, K.",
        TITLE = "Attack To Defend: Exploiting Adversarial Attacks for Detecting
Poisoned Models",
        BOOKTITLE = CVPR24,
        YEAR = "2024",
        PAGES = "24726-24735",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157963"}

@inproceedings{bb162111,
        AUTHOR = "Karim, N. and Arafat, A.A. and Khalid, U. and Guo, Z. and Rahnavard, N.",
        TITLE = "Augmented Neural Fine-tuning for Efficient Backdoor Purification",
        BOOKTITLE = ECCV24,
        YEAR = "2024",
        PAGES = "LXXX: 401-418",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157964"}

@inproceedings{bb162112,
        AUTHOR = "Pham, H. and Ta, T.A. and Tran, A. and Doan, K.D.",
        TITLE = "Flatness-aware Sequential Learning Generates Resilient Backdoors",
        BOOKTITLE = ECCV24,
        YEAR = "2024",
        PAGES = "LXXXVII: 89-107",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157965"}

@inproceedings{bb162113,
        AUTHOR = "Huynh, T. and Tran, A. and Doan, K.D. and Pham, T.",
        TITLE = "Data Poisoning Quantization Backdoor Attack",
        BOOKTITLE = ECCV24,
        YEAR = "2024",
        PAGES = "LXXXIV: 38-54",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157966"}

@inproceedings{bb162114,
        AUTHOR = "Phan, H. and Xiao, J.Q. and Sui, Y. and Zhang, T. and Tang, Z.J. and Shi, C. and Wang, Y. and Chen, Y.Y. and Yuan, B.",
        TITLE = "Clean and Compact: Efficient Data-free Backdoor Defense with Model
Compactness",
        BOOKTITLE = ECCV24,
        YEAR = "2024",
        PAGES = "LX: 273-290",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157967"}

@inproceedings{bb162115,
        AUTHOR = "Jin, H.B. and Chen, R.X. and Chen, J. and Zheng, H.B. and Zhang, Y. and Wang, H.H.",
        TITLE = "Catchbackdoor: Backdoor Detection via Critical Trojan Neural Path
Fuzzing",
        BOOKTITLE = ECCV24,
        YEAR = "2024",
        PAGES = "XLVII: 90-106",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157968"}

@inproceedings{bb162116,
        AUTHOR = "Huang, W.K. and Ye, M. and Shi, Z.K. and Du, B. and Tao, D.C.",
        TITLE = "Fisher Calibration for Backdoor-robust Heterogeneous Federated Learning",
        BOOKTITLE = ECCV24,
        YEAR = "2024",
        PAGES = "XV: 247-265",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157969"}

@inproceedings{bb162117,
        AUTHOR = "Wang, R.F. and Guo, Q. and Li, H.L. and Wan, R.J.",
        TITLE = "Event Trojan: Asynchronous Event-based Backdoor Attacks",
        BOOKTITLE = ECCV24,
        YEAR = "2024",
        PAGES = "VII: 315-332",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157970"}

@inproceedings{bb162118,
        AUTHOR = "Cheng, S.Y. and Shen, G.Y. and Zhang, K.Y. and Tao, G.H. and An, S.W. and Guo, H.X. and Ma, S.Q. and Zhang, X.Y.",
        TITLE = "Unit: Backdoor Mitigation via Automated Neural Distribution Tightening",
        BOOKTITLE = ECCV24,
        YEAR = "2024",
        PAGES = "LXII: 262-281",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157971"}

@inproceedings{bb162119,
        AUTHOR = "Cai, K. and Zhang, Z.K. and Lou, Q. and Yao, F.",
        TITLE = "WBP: Training-time Backdoor Attacks Through Hardware-based Weight Bit
Poisoning",
        BOOKTITLE = ECCV24,
        YEAR = "2024",
        PAGES = "LXV: 179-197",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157972"}

@inproceedings{bb162120,
        AUTHOR = "Lyu, W.M. and Pang, L. and Ma, T.F. and Ling, H.B. and Chen, C.",
        TITLE = "TROJVLM: Backdoor Attack Against Vision Language Models",
        BOOKTITLE = ECCV24,
        YEAR = "2024",
        PAGES = "LXV: 467-483",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157973"}

@inproceedings{bb162121,
        AUTHOR = "Shin, J.J.",
        TITLE = "Mask-Based Invisible Backdoor Attacks on Object Detection",
        BOOKTITLE = ICIP24,
        YEAR = "2024",
        PAGES = "1050-1056",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157974"}

@inproceedings{bb162122,
        AUTHOR = "Li, B. and Cai, Y. and Li, H. and Xue, F. and Li, Z.F. and Li, Y.M.",
        TITLE = "Nearest is Not Dearest: Towards Practical Defense Against
Quantization-Conditioned Backdoor Attacks",
        BOOKTITLE = CVPR24,
        YEAR = "2024",
        PAGES = "24523-24533",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157975"}

@inproceedings{bb162123,
        AUTHOR = "Guan, J. and Liang, J. and He, R.",
        TITLE = "Backdoor Defense via Test-Time Detecting and Repairing",
        BOOKTITLE = CVPR24,
        YEAR = "2024",
        PAGES = "24564-24573",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157976"}

@inproceedings{bb162124,
        AUTHOR = "Cheng, S.Y. and Tao, G.H. and Liu, Y.Q. and Shen, G.Y. and An, S.W. and Feng, S.W. and Xu, X.Z. and Zhang, K.Y. and Ma, S.Q. and Zhang, X.Y.",
        TITLE = "Lotus: Evasive and Resilient Backdoor Attacks through
Sub-Partitioning",
        BOOKTITLE = CVPR24,
        YEAR = "2024",
        PAGES = "24798-24809",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157977"}

@inproceedings{bb162125,
        AUTHOR = "Hammoud, H.A.A.K. and Liu, S.M. and Alkhrashi, M. and AlBalawi, F. and Ghanem, B.",
        TITLE = "Look, Listen, and Attack:
Backdoor Attacks Against Video Action Recognition",
        BOOKTITLE = SAIAD24,
        YEAR = "2024",
        PAGES = "3439-3450",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157978"}

@inproceedings{bb162126,
        AUTHOR = "Zhang, J.H. and Liu, H.B. and Jia, J.Y. and Gong, N.Z.Q.",
        TITLE = "Data Poisoning Based Backdoor Attacks to Contrastive Learning",
        BOOKTITLE = CVPR24,
        YEAR = "2024",
        PAGES = "24357-24366",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157979"}

@inproceedings{bb162127,
        AUTHOR = "Yin, W. and Lou, J. and Zhou, P. and Xie, Y. and Feng, D. and Sun, Y.H. and Zhang, T. and Sun, L.C.",
        TITLE = "Physical Backdoor: Towards Temperature-Based Backdoor Attacks in the
Physical World",
        BOOKTITLE = CVPR24,
        YEAR = "2024",
        PAGES = "12733-12743",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157980"}

@inproceedings{bb162128,
        AUTHOR = "Subramanya, A. and Koohpayegani, S.A. and Saha, A. and Tejankar, A. and Pirsiavash, H.",
        TITLE = "A Closer Look at Robustness of Vision Transformers to Backdoor
Attacks",
        BOOKTITLE = WACV24,
        YEAR = "2024",
        PAGES = "3862-3871",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157981"}

@inproceedings{bb162129,
        AUTHOR = "Zhu, Z.X. and Wang, R. and Zou, C. and Jing, L.H.",
        TITLE = "The Victim and The Beneficiary: Exploiting a Poisoned Model to Train
a Clean Model on Poisoned Data",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "155-164",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157982"}

@inproceedings{bb162130,
        AUTHOR = "Ding, R. and Duan, S.J. and Xu, X.L. and Fei, Y.",
        TITLE = "VertexSerum: Poisoning Graph Neural Networks for Link Inference",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4509-4518",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157983"}

@inproceedings{bb162131,
        AUTHOR = "Bansal, H. and Yin, F. and Singhi, N. and Grover, A. and Yang, Y. and Chang, K.W.",
        TITLE = "CleanCLIP: Mitigating Data Poisoning Attacks in Multimodal
Contrastive Learning",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "112-123",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157984"}

@inproceedings{bb162132,
        AUTHOR = "Sur, I. and Sikka, K. and Walmer, M. and Koneripalli, K. and Roy, A. and Lin, X. and Divakaran, A. and Jha, S.",
        TITLE = "TIJO: Trigger Inversion with Joint Optimization for Defending
Multimodal Backdoored Models",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "165-175",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157985"}

@inproceedings{bb162133,
        AUTHOR = "Li, C.J. and Pang, R. and Xi, Z. and Du, T.Y. and Ji, S. and Yao, Y. and Wang, T.",
        TITLE = "An Embarrassingly Simple Backdoor Attack on Self-supervised Learning",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4344-4355",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157986"}

@inproceedings{bb162134,
        AUTHOR = "Zhu, M.L. and Wei, S. and Shen, L. and Fan, Y.B. and Wu, B.Y.",
        TITLE = "Enhancing Fine-Tuning based Backdoor Defense with Sharpness-Aware
Minimization",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4443-4454",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157987"}

@inproceedings{bb162135,
        AUTHOR = "Liu, M. and Sangiovanni Vincentelli, A. and Yue, X.Y.",
        TITLE = "Beating Backdoor Attack at Its Own Game",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4597-4606",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157988"}

@inproceedings{bb162136,
        AUTHOR = "Huang, S.Q. and Li, Y.J. and Chen, C. and Shi, L. and Gao, Y.",
        TITLE = "Multi-metrics adaptively identifies backdoors in Federated learning",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4629-4639",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157989"}

@inproceedings{bb162137,
        AUTHOR = "Guo, J.F. and Li, A. and Wang, L. and Liu, C.",
        TITLE = "PolicyCleanse: Backdoor Detection and Mitigation for Competitive
Reinforcement Learning",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4676-4685",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157990"}

@inproceedings{bb162138,
        AUTHOR = "Shejwalkar, V. and Lyu, L.J. and Houmansadr, A.",
        TITLE = "The Perils of Learning From Unlabeled Data:
Backdoor Attacks on Semi-supervised Learning",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4707-4717",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157991"}

@inproceedings{bb162139,
        AUTHOR = "Wu, Y.T. and Han, X. and Qiu, H. and Zhang, T.W.",
        TITLE = "Computation and Data Efficient Backdoor Attacks",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4782-4791",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157992"}

@inproceedings{bb162140,
        AUTHOR = "Han, G. and Choi, J. and Hong, H.G. and Kim, J.",
        TITLE = "Data Poisoning Attack Aiming the Vulnerability of Continual Learning",
        BOOKTITLE = ICIP23,
        YEAR = "2023",
        PAGES = "1905-1909",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157993"}

@inproceedings{bb162141,
        AUTHOR = "Huang, B. and Wang, Z.",
        TITLE = "Efficient any-Target Backdoor Attack with Pseudo Poisoned Samples",
        BOOKTITLE = ICIP23,
        YEAR = "2023",
        PAGES = "3319-3323",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157994"}

@inproceedings{bb162142,
        AUTHOR = "Shen, Z.H. and Hou, W. and Li, Y.",
        TITLE = "CSSBA: A Clean Label Sample-Specific Backdoor Attack",
        BOOKTITLE = ICIP23,
        YEAR = "2023",
        PAGES = "965-969",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157995"}

@inproceedings{bb162143,
        AUTHOR = "Sun, M.J. and Kolter, Z.",
        TITLE = "Single Image Backdoor Inversion via Robust Smoothed Classifiers",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "8113-8122",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157996"}

@inproceedings{bb162144,
        AUTHOR = "Hammoud, H.A.A.K. and Bibi, A. and Torr, P.H.S. and Ghanem, B.",
        TITLE = "Don't FREAK Out: A Frequency-Inspired Approach to Detecting Backdoor
Poisoned Samples in DNNs",
        BOOKTITLE = AML23,
        YEAR = "2023",
        PAGES = "2338-2345",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157997"}

@inproceedings{bb162145,
        AUTHOR = "Gao, K.F. and Bai, Y. and Gu, J.D. and Yang, Y. and Xia, S.T.",
        TITLE = "Backdoor Defense via Adaptively Splitting Poisoned Dataset",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "4005-4014",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157998"}

@inproceedings{bb162146,
        AUTHOR = "Chou, S.Y. and Chen, P.Y. and Ho, T.Y.",
        TITLE = "How to Backdoor Diffusion Models?",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "4015-4024",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT157999"}

@inproceedings{bb162147,
        AUTHOR = "Zheng, R.K. and Tang, R.J. and Li, J.Z. and Liu, L.",
        TITLE = "Data-Free Backdoor Removal Based on Channel Lipschitzness",
        BOOKTITLE = ECCV22,
        YEAR = "2022",
        PAGES = "V:175-191",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158000"}

@inproceedings{bb162148,
        AUTHOR = "Dolatabadi, H.M. and Erfani, S. and Leckie, C.",
        TITLE = "Collider: A Robust Training Framework for Backdoor Data",
        BOOKTITLE = ACCV22,
        YEAR = "2022",
        PAGES = "VI:681-698",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158001"}

@inproceedings{bb162149,
        AUTHOR = "Ji, H.X. and Li, J. and Wu, C.",
        TITLE = "CRAB: Certified Patch Robustness Against Poisoning-Based Backdoor
Attacks",
        BOOKTITLE = ICIP22,
        YEAR = "2022",
        PAGES = "2486-2490",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158002"}

@inproceedings{bb162150,
        AUTHOR = "Liu, Y.Q. and Shen, G.Y. and Tao, G.H. and Wang, Z.T. and Ma, S.Q. and Zhang, X.Y.",
        TITLE = "Complex Backdoor Detection by Symmetric Feature Differencing",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "14983-14993",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158003"}

@inproceedings{bb162151,
        AUTHOR = "Guan, J. and Tu, Z. and He, R. and Tao, D.C.",
        TITLE = "Few-shot Backdoor Defense Using Shapley Estimation",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "13348-13357",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158004"}

@inproceedings{bb162152,
        AUTHOR = "Tao, G.H. and Shen, G.Y. and Liu, Y.Q. and An, S.W. and Xu, Q.L. and Ma, S.Q. and Li, P. and Zhang, X.Y.",
        TITLE = "Better Trigger Inversion Optimization in Backdoor Scanning",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "13358-13368",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158005"}

@inproceedings{bb162153,
        AUTHOR = "Chan, S.H. and Dong, Y.P. and Zhu, J. and Zhang, X.L. and Zhou, J.",
        TITLE = "Baddet: Backdoor Attacks on Object Detection",
        BOOKTITLE = AdvRob22,
        YEAR = "2022",
        PAGES = "396-412",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158006"}

@inproceedings{bb162154,
        AUTHOR = "Ramakrishnan, G. and Albarghouthi, A.",
        TITLE = "Backdoors in Neural Models of Source Code",
        BOOKTITLE = "ICPR22",
        YEAR = "2022",
        PAGES = "2892-2899",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158007"}

@inproceedings{bb162155,
        AUTHOR = "Phan, H. and Shi, C. and Xie, Y. and Zhang, T.F. and Li, Z.H. and Zhao, T.M. and Liu, J. and Wang, Y. and Chen, Y.Y. and Yuan, B.",
        TITLE = "RIBAC: Towards Robust and Imperceptible Backdoor Attack against Compact
DNN",
        BOOKTITLE = ECCV22,
        YEAR = "2022",
        PAGES = "IV:708-724",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158008"}

@inproceedings{bb162156,
        AUTHOR = "Feng, Y. and Ma, B. and Zhang, J. and Zhao, S.S. and Xia, Y. and Tao, D.C.",
        TITLE = "FIBA: Frequency-Injection based Backdoor Attack in Medical Image
Analysis",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "20844-20853",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158009"}

@inproceedings{bb162157,
        AUTHOR = "Zhao, Z.D. and Chen, X.J. and Xuan, Y.X. and Dong, Y. and Wang, D. and Liang, K.",
        TITLE = "DEFEAT: Deep Hidden Feature Backdoor Attacks by Imperceptible
Perturbation and Latent Representation Constraints",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "15192-15201",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158010"}

@inproceedings{bb162158,
        AUTHOR = "Li, Y.Z. and Li, Y.M. and Wu, B.Y. and Li, L.K. and He, R. and Lyu, S.W.",
        TITLE = "Invisible Backdoor Attack with Sample-Specific Triggers",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "16443-16452",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158011"}

@inproceedings{bb162159,
        AUTHOR = "Doan, K. and Lao, Y.J. and Zhao, W.J. and Li, P.",
        TITLE = "LIRA: Learnable, Imperceptible and Robust Backdoor Attacks",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "11946-11956",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158012"}

@inproceedings{bb162160,
        AUTHOR = "Mehra, A. and Kailkhura, B. and Chen, P.Y. and Hamm, J.",
        TITLE = "How Robust are Randomized Smoothing based Defenses to Data Poisoning?",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "13239-13248",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158013"}

@inproceedings{bb162161,
        AUTHOR = "Xiang, Z. and Miller, D.J. and Chen, S. and Li, X. and Kesidis, G.",
        TITLE = "A Backdoor Attack against 3D Point Cloud Classifiers",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "7577-7587",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158014"}

@inproceedings{bb162162,
        AUTHOR = "Ren, Y.K. and Li, L.F. and Zhou, J.",
        TITLE = "Simtrojan: Stealthy Backdoor Attack",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "819-823",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158015"}

@inproceedings{bb162163,
        AUTHOR = "Zhu, L. and Ning, R. and Xin, C.S. and Wang, C.G. and Wu, H.Y.",
        TITLE = "CLEAR: Clean-up Sample-Targeted Backdoor in Neural Networks",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "16433-16442",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158016"}

@inproceedings{bb162164,
        AUTHOR = "Zeng, Y. and Park, W. and Mao, Z.M. and Jia, R.X.",
        TITLE = "Rethinking the Backdoor Attacks' Triggers: A Frequency Perspective",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "16453-16461",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158017"}

@inproceedings{bb162165,
        AUTHOR = "Raj, A. and Pal, A. and Arora, C.",
        TITLE = "Identifying Physically Realizable Triggers for Backdoored Face
Recognition Networks",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "3023-3027",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158018"}

@inproceedings{bb162166,
        AUTHOR = "Wang, R. and Zhang, G.Y. and Liu, S.J. and Chen, P.Y. and Xiong, J.J. and Wang, M.",
        TITLE = "Practical Detection of Trojan Neural Networks:
Data-limited and Data-free Cases",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XXIII:222-238",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158019"}

@inproceedings{bb162167,
        AUTHOR = "Liu, Y.F. and Ma, X.J. and Bailey, J. and Lu, F.",
        TITLE = "Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networks",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "X:182-199",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158020"}

@inproceedings{bb162168,
        AUTHOR = "Zhao, S. and Ma, X. and Zheng, X. and Bailey, J. and Chen, J. and Jiang, Y.",
        TITLE = "Clean-Label Backdoor Attacks on Video Recognition Models",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "14431-14440",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158021"}

@inproceedings{bb162169,
        AUTHOR = "Kolouri, S. and Saha, A. and Pirsiavash, H. and Hoffmann, H.",
        TITLE = "Universal Litmus Patterns: Revealing Backdoor Attacks in CNNs",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "298-307",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158022"}

@inproceedings{bb162170,
        AUTHOR = "Truong, L. and Jones, C. and Hutchinson, B. and August, A. and Praggastis, B. and Jasper, R. and Nichols, N. and Tuor, A.",
        TITLE = "Systematic Evaluation of Backdoor Data Poisoning Attacks on Image
Classifiers",
        BOOKTITLE = AML-CV20,
        YEAR = "2020",
        PAGES = "3422-3431",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158023"}

@inproceedings{bb162171,
        AUTHOR = "Barni, M. and Kallas, K. and Tondi, B.",
        TITLE = "A New Backdoor Attack in CNNS by Training Set Corruption Without
Label Poisoning",
        BOOKTITLE = ICIP19,
        YEAR = "2019",
        PAGES = "101-105",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT158024"}

@article{bb162172,
        AUTHOR = "Goldblum, M. and Tsipras, D. and Xie, C. and Chen, X.Y. and Schwarzschild, A. and Song, D. and Madry, A. and Li, B. and Goldstein, T.",
        TITLE = "Dataset Security for Machine Learning:
Data Poisoning, Backdoor Attacks, and Defenses",
        JOURNAL = PAMI,
        VOLUME = "45",
        YEAR = "2023",
        NUMBER = "2",
        MONTH = "February",
        PAGES = "1563-1580",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT158025"}

@inproceedings{bb162173,
        AUTHOR = "Mu, B.X. and Niu, Z.X. and Wang, L. and Wang, X. and Mia, Q.G. and Jin, R. and Hua, G.",
        TITLE = "Progressive Backdoor Erasing via connecting Backdoor and Adversarial
Attacks",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "20495-20503",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT158026"}

@inproceedings{bb162174,
        AUTHOR = "Pang, L. and Sun, T. and Ling, H.B. and Chen, C.",
        TITLE = "Backdoor Cleansing with Unlabeled Data",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "12218-12227",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT158027"}

@inproceedings{bb162175,
        AUTHOR = "Zhang, Z. and Liu, Q. and Wang, Z.C. and Lu, Z. and Hu, Q.Y.",
        TITLE = "Backdoor Defense via Deconfounded Representation Learning",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "12228-12238",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT158028"}

@article{bb162176,
        AUTHOR = "Yu, Y. and Wang, Y.F. and Yang, W.H. and Guo, L.Q. and Lu, S.J. and Duan, L.Y. and Tan, Y.P. and Kot, A.C.",
        TITLE = "Robust and Transferable Backdoor Attacks Against Deep Image
Compression With Selective Frequency Prior",
        JOURNAL = PAMI,
        VOLUME = "47",
        YEAR = "2025",
        NUMBER = "3",
        MONTH = "March",
        PAGES = "1674-1693",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT158029"}

@inproceedings{bb162177,
        AUTHOR = "Yu, Y. and Wang, Y.F. and Yang, W.H. and Lu, S.J. and Tan, Y.P. and Kot, A.C.",
        TITLE = "Backdoor Attacks Against Deep Image Compression via Adaptive
Frequency Trigger",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "12250-12259",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT158030"}

@article{bb162178,
        AUTHOR = "Yang, W.H. and Huang, H.F. and Liu, J.Y. and Kot, A.C.",
        TITLE = "Facial Image Compression via Neural Image Manifold Compression",
        JOURNAL = CirSysVideo,
        VOLUME = "35",
        YEAR = "2025",
        NUMBER = "4",
        MONTH = "April",
        PAGES = "3812-3824",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT158031"}

@inproceedings{bb162179,
        AUTHOR = "Feng, S.W. and Tao, G.H. and Cheng, S.Y. and Shen, G.Y. and Xu, X.Z. and Liu, Y.Q. and Zhang, K.Y. and Ma, S.Q. and Zhang, X.Y.",
        TITLE = "Detecting Backdoors in Pre-trained Encoders",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "16352-16362",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT158032"}

@inproceedings{bb162180,
        AUTHOR = "Liu, X. and Li, M.H. and Wang, H.Y. and Hu, S. and Ye, D. and Jin, H. and Wu, L. and Xiao, C.W.",
        TITLE = "Detecting Backdoors During the Inference Stage Based on Corruption
Robustness Consistency",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "16363-16372",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT158033"}

@inproceedings{bb162181,
        AUTHOR = "Xu, Q. and Tao, G.N. and Honorio, J. and Liu, Y.Q. and An, S.W. and Shen, G.Y. and Cheng, S.Y. and Zhang, X.Y.",
        TITLE = "MEDIC: Remove Model Backdoors via Importance Driven Cloning",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "20485-20494",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT158034"}

@inproceedings{bb162182,
        AUTHOR = "Chen, S. and Chen, H.L. and Haque, M. and Liu, C. and Yang, W.",
        TITLE = "The Dark Side of Dynamic Routing Neural Networks: Towards Efficiency
Backdoor Injection",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "24585-24594",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT158035"}

@inproceedings{bb162183,
        AUTHOR = "Bober Irizar, M. and Shumailov, I. and Zhao, Y.R. and Mullins, R. and Papernot, N.",
        TITLE = "Architectural Backdoors in Neural Networks",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "24595-24604",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT158036"}

@inproceedings{bb162184,
        AUTHOR = "Yuan, Z.H. and Zhou, P. and Zou, K. and Cheng, Y.",
        TITLE = "You Are Catching My Attention: Are Vision Transformers Bad Learners
under Backdoor Attacks?",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "24605-24615",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT158037"}

@inproceedings{bb162185,
        AUTHOR = "Tejankar, A. and Sanjabi, M. and Wang, Q.F. and Wang, S.N. and Firooz, H. and Pirsiavash, H. and Tan, L.",
        TITLE = "Defending Against Patch-based Backdoor Attacks on Self-Supervised
Learning",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "12239-12249",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT158038"}

@inproceedings{bb162186,
        AUTHOR = "Saha, A. and Tejankar, A. and Koohpayegani, S.A. and Pirsiavash, H.",
        TITLE = "Backdoor Attacks on Self-Supervised Learning",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "13327-13336",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT158039"}

@inproceedings{bb162187,
        AUTHOR = "Qi, X.Y. and Xie, T.H. and Pan, R.Z. and Zhu, J.F. and Yang, Y. and Bu, K.",
        TITLE = "Towards Practical Deployment-Stage Backdoor Attack on Deep Neural
Networks",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "13337-13347",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT158040"}

@inproceedings{bb162188,
        AUTHOR = "Huang, S.J. and Peng, W.Q. and Jia, Z.W. and Tu, Z.W.",
        TITLE = "One-pixel Signature: Characterizing CNN Models for Backdoor Detection",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XXVII:326-341",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT158041"}

@article{bb162189,
        AUTHOR = "Hang, J. and Han, K. and Chen, H. and Li, Y.",
        TITLE = "Ensemble adversarial black-box attacks against deep learning systems",
        JOURNAL = PR,
        VOLUME = "101",
        YEAR = "2020",
        PAGES = "107184",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT158042"}

@article{bb162190,
        AUTHOR = "Correia Silva, J.R. and Berriel, R.F. and Badue, C. and de Souza, A.F. and Oliveira Santos, T.",
        TITLE = "Copycat CNN: Are random non-Labeled data enough to steal knowledge
from black-box models?",
        JOURNAL = PR,
        VOLUME = "113",
        YEAR = "2021",
        PAGES = "107830",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT158043"}

@article{bb162191,
        AUTHOR = "Gragnaniello, D. and Marra, F. and Verdoliva, L. and Poggi, G.",
        TITLE = "Perceptual quality-preserving black-box attack against deep learning
image classifiers",
        JOURNAL = PRL,
        VOLUME = "147",
        YEAR = "2021",
        PAGES = "142-149",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT158044"}

@article{bb162192,
        AUTHOR = "Li, N.N. and Chen, Z.Z.",
        TITLE = "Toward Visual Distortion in Black-Box Attacks",
        JOURNAL = IP,
        VOLUME = "30",
        YEAR = "2021",
        PAGES = "6156-6167",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT158045"}

@article{bb162193,
        AUTHOR = "Lin, D. and Wang, Y.G. and Tang, W.X. and Kang, X.G.",
        TITLE = "Boosting Query Efficiency of Meta Attack With Dynamic Fine-Tuning",
        JOURNAL = SPLetters,
        VOLUME = "29",
        YEAR = "2022",
        PAGES = "2557-2561",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT158046"}

@article{bb162194,
        AUTHOR = "Cina, A.E. and Torcinovich, A. and Pelillo, M.",
        TITLE = "A black-box adversarial attack for poisoning clustering",
        JOURNAL = PR,
        VOLUME = "122",
        YEAR = "2022",
        PAGES = "108306",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT158047"}

@article{bb162195,
        AUTHOR = "Ghosh, A. and Mullick, S.S. and Datta, S. and Das, S. and Das, A.K. and Mallipeddi, R.",
        TITLE = "A black-box adversarial attack strategy with adjustable sparsity and
generalizability for deep image classifiers",
        JOURNAL = PR,
        VOLUME = "122",
        YEAR = "2022",
        PAGES = "108279",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT158048"}

@article{bb162196,
        AUTHOR = "Chen, S. and He, F. and Huang, X.L. and Zhang, K.",
        TITLE = "Relevance attack on detectors",
        JOURNAL = PR,
        VOLUME = "124",
        YEAR = "2022",
        PAGES = "108491",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT158049"}

@article{bb162197,
        AUTHOR = "Wei, X.X. and Yan, H.Q. and Li, B.",
        TITLE = "Sparse Black-Box Video Attack with Reinforcement Learning",
        JOURNAL = IJCV,
        VOLUME = "130",
        YEAR = "2022",
        NUMBER = "6",
        MONTH = "June",
        PAGES = "1459-1473",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT158050"}

@article{bb162198,
        AUTHOR = "Hu, Z.C. and Li, H. and Yuan, L.H. and Cheng, Z. and Yuan, W. and Zhu, M.",
        TITLE = "Model scheduling and sample selection for ensemble adversarial
example attacks",
        JOURNAL = PR,
        VOLUME = "130",
        YEAR = "2022",
        PAGES = "108824",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT158051"}

@article{bb162199,
        AUTHOR = "Huang, L.F. and Wei, S.X. and Gao, C.Y. and Liu, N.",
        TITLE = "Cyclical Adversarial Attack Pierces Black-box Deep Neural Networks",
        JOURNAL = PR,
        VOLUME = "131",
        YEAR = "2022",
        PAGES = "108831",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT158052"}