{"id":"https://openalex.org/W4362714395","doi":"https://doi.org/10.1109/tifs.2023.3265535","title":"Black-Box Dataset Ownership Verification via Backdoor Watermarking","display_name":"Black-Box Dataset Ownership Verification via Backdoor Watermarking","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4362714395","doi":"https://doi.org/10.1109/tifs.2023.3265535"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2023.3265535","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2023.3265535","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100346332","display_name":"Yiming Li","orcid":"https://orcid.org/0000-0002-2258-265X"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yiming Li","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-2258-265X","affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039795462","display_name":"Mingyan Zhu","orcid":"https://orcid.org/0009-0009-8060-4237"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingyan Zhu","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"],"raw_orcid":"https://orcid.org/0009-0009-8060-4237","affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045406560","display_name":"Xue Yang","orcid":"https://orcid.org/0000-0002-4083-729X"},"institutions":[{"id":"https://openalex.org/I4800084","display_name":"Southwest Jiaotong University","ror":"https://ror.org/00hn7w693","country_code":"CN","type":"education","lineage":["https://openalex.org/I4800084"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xue Yang","raw_affiliation_strings":["School of Information Science and Technology, Southwest Jiaotong University, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0002-4083-729X","affiliations":[{"raw_affiliation_string":"School of Information Science and Technology, Southwest Jiaotong University, Chengdu, China","institution_ids":["https://openalex.org/I4800084"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101626204","display_name":"Yong Jiang","orcid":"https://orcid.org/0000-0002-4260-1395"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yong Jiang","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","Research Center of Artificial Intelligence, Peng Cheng Laboratory, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-4260-1395","affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]},{"raw_affiliation_string":"Research Center of Artificial Intelligence, Peng Cheng Laboratory, Shenzhen, China","institution_ids":["https://openalex.org/I4210136793"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012261926","display_name":"Tao Wei","orcid":"https://orcid.org/0000-0002-6549-3999"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tao Wei","raw_affiliation_strings":["Ant Group, Hangzhou, Zhejiang, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ant Group, Hangzhou, Zhejiang, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5034104790","display_name":"Shu\u2010Tao Xia","orcid":"https://orcid.org/0000-0002-8639-982X"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shu-Tao Xia","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","Research Center of Artificial Intelligence, Peng Cheng Laboratory, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-8639-982X","affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]},{"raw_affiliation_string":"Research Center of Artificial Intelligence, Peng Cheng Laboratory, Shenzhen, China","institution_ids":["https://openalex.org/I4210136793"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":11.9222,"has_fulltext":false,"cited_by_count":91,"citation_normalized_percentile":{"value":0.99068716,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":"18","issue":null,"first_page":"2318","last_page":"2332"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9730798006057739},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8618775606155396},{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.7031210660934448},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.6308625936508179},{"id":"https://openalex.org/keywords/permission","display_name":"Permission","score":0.613186776638031},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5031573176383972},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.46812406182289124},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.46654748916625977},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.43701714277267456},{"id":"https://openalex.org/keywords/replicate","display_name":"Replicate","score":0.42471373081207275},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.4224355220794678},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.41051095724105835},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.280750036239624},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.18723425269126892},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.13800010085105896},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.08549869060516357}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9730798006057739},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8618775606155396},{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.7031210660934448},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.6308625936508179},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.613186776638031},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5031573176383972},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46812406182289124},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.46654748916625977},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.43701714277267456},{"id":"https://openalex.org/C2781162219","wikidata":"https://www.wikidata.org/wiki/Q26250693","display_name":"Replicate","level":2,"score":0.42471373081207275},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.4224355220794678},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.41051095724105835},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.280750036239624},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.18723425269126892},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.13800010085105896},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.08549869060516357},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2023.3265535","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2023.3265535","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Quality Education","id":"https://metadata.un.org/sdg/4","score":0.5099999904632568}],"awards":[{"id":"https://openalex.org/G2802018518","display_name":null,"funder_award_id":"62171248","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3046155044","display_name":null,"funder_award_id":"PCL2021A07","funder_id":"https://openalex.org/F4320318558","funder_display_name":"Peng Cheng Laboratory"},{"id":"https://openalex.org/G5563798569","display_name":null,"funder_award_id":"12141108","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6723942008","display_name":null,"funder_award_id":"2023NSFSC1394","funder_id":"https://openalex.org/F4320333335","funder_display_name":"Sichuan Province Science and Technology Support Program"},{"id":"https://openalex.org/G7659083893","display_name":null,"funder_award_id":"62202393","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8696386235","display_name":null,"funder_award_id":"JCYJ20220818101012025","funder_id":"https://openalex.org/F4320336569","funder_display_name":"Shenzhen Science and Technology Innovation Program"},{"id":"https://openalex.org/G973676509","display_name":null,"funder_award_id":"2022YFB3105000","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320318558","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320326705","display_name":"Science, Technology and Innovation Commission of Shenzhen Municipality","ror":null},{"id":"https://openalex.org/F4320333335","display_name":"Sichuan Province Science and Technology Support Program","ror":null},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null},{"id":"https://openalex.org/F4320336569","display_name":"Shenzhen Science and Technology Innovation Program","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":67,"referenced_works":["https://openalex.org/W102708294","https://openalex.org/W1832693441","https://openalex.org/W1834627138","https://openalex.org/W2008857988","https://openalex.org/W2064675550","https://openalex.org/W2108598243","https://openalex.org/W2109426455","https://openalex.org/W2194775991","https://openalex.org/W2307601096","https://openalex.org/W2743279517","https://openalex.org/W2744999500","https://openalex.org/W2774423163","https://openalex.org/W2807363941","https://openalex.org/W2907492528","https://openalex.org/W2911261396","https://openalex.org/W2942091739","https://openalex.org/W2963460857","https://openalex.org/W2971196067","https://openalex.org/W2973217491","https://openalex.org/W3004610483","https://openalex.org/W3014625547","https://openalex.org/W3016632787","https://openalex.org/W3034126795","https://openalex.org/W3034579202","https://openalex.org/W3042368254","https://openalex.org/W3081178496","https://openalex.org/W3083185154","https://openalex.org/W3094293870","https://openalex.org/W3106567420","https://openalex.org/W3118608800","https://openalex.org/W3133747496","https://openalex.org/W3162162782","https://openalex.org/W3163083600","https://openalex.org/W3167334189","https://openalex.org/W3168576092","https://openalex.org/W3168997536","https://openalex.org/W3179216274","https://openalex.org/W3200110661","https://openalex.org/W3204619801","https://openalex.org/W3205428821","https://openalex.org/W3206071277","https://openalex.org/W3217374154","https://openalex.org/W4205321550","https://openalex.org/W4205588087","https://openalex.org/W4213019189","https://openalex.org/W4214680449","https://openalex.org/W4252979261","https://openalex.org/W4292993844","https://openalex.org/W4312351352","https://openalex.org/W4323655037","https://openalex.org/W6637373629","https://openalex.org/W6676984168","https://openalex.org/W6738964360","https://openalex.org/W6746897123","https://openalex.org/W6754929296","https://openalex.org/W6770411749","https://openalex.org/W6774150056","https://openalex.org/W6779739866","https://openalex.org/W6787972765","https://openalex.org/W6789325072","https://openalex.org/W6792327856","https://openalex.org/W6793958797","https://openalex.org/W6800099408","https://openalex.org/W6802287967","https://openalex.org/W6803053407","https://openalex.org/W6809905531","https://openalex.org/W6849049410"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4386080799","https://openalex.org/W3140988292","https://openalex.org/W4317672133","https://openalex.org/W4386185023"],"abstract_inverted_index":{"Deep":[0],"learning,":[1],"especially":[2],"deep":[3],"neural":[4],"networks":[5],"(DNNs),":[6],"has":[7,28],"been":[8],"widely":[9],"and":[10,21,46,126,158,176],"successfully":[11],"adopted":[12,68,105],"in":[13],"many":[14],"critical":[15],"applications":[16],"for":[17,69,106,142,173,181,212],"its":[18,124],"high":[19],"effectiveness":[20,206],"efficiency.":[22],"The":[23,210],"rapid":[24],"development":[25],"of":[26,33,53,97,190,198,207],"DNNs":[27],"benefited":[29],"from":[30],"the":[31,51,95,117,143,205],"existence":[32],"some":[34,187],"high-quality":[35],"datasets":[36,61,99,197],"(":[37,167],"<italic":[38,168],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[39,169],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">e.g</i>":[40,170],".,":[41,171],"ImageNet),":[42],"which":[43,203],"allow":[44],"researchers":[45],"developers":[47],"to":[48,87,135,146],"easily":[49],"verify":[50,204],"performance":[52],"their":[54],"methods.":[55,192],"Currently,":[56],"almost":[57],"all":[58],"existing":[59],"released":[60,98],"require":[62],"that":[63],"they":[64,103],"can":[65,114],"only":[66,115],"be":[67],"academic":[70],"or":[71],"educational":[72],"purposes":[73,77],"rather":[74],"than":[75],"commercial":[76],"without":[78],"permission.":[79],"However,":[80],"there":[81],"is":[82,216],"still":[83],"no":[84,121],"good":[85],"way":[86],"ensure":[88],"that.":[89],"In":[90],"this":[91,131],"paper,":[92],"we":[93,133,162],"formulate":[94],"protection":[96],"as":[100],"verifying":[101],"whether":[102],"are":[104,201],"training":[107,127],"a":[108,178],"(suspicious)":[109],"third-party":[110],"model,":[111],"where":[112],"defenders":[113],"query":[116],"model":[118],"while":[119],"having":[120],"information":[122],"about":[123],"parameters":[125],"details.":[128],"Based":[129],"on":[130,194],"formulation,":[132],"propose":[134],"embed":[136],"external":[137],"patterns":[138],"via":[139],"backdoor":[140,165],"watermarking":[141,157,175],"ownership":[144],"verification":[145],"protect":[147],"them.":[148],"Our":[149],"method":[150,180],"contains":[151],"two":[152],"main":[153,214],"parts,":[154],"including":[155],"dataset":[156,159,174,182],"verification.":[160,183],"Specifically,":[161],"exploit":[163],"poison-only":[164],"attacks":[166],"BadNets)":[172],"design":[177],"hypothesis-test-guided":[179],"We":[184],"also":[185],"provide":[186],"theoretical":[188],"analyses":[189],"our":[191,208],"Experiments":[193],"multiple":[195],"benchmark":[196],"different":[199],"tasks":[200],"conducted,":[202],"method.":[209],"code":[211],"reproducing":[213],"experiments":[215],"available":[217],"at":[218],"https://github.com/THUYimingLi/DVBW.":[219]},"counts_by_year":[{"year":2026,"cited_by_count":10},{"year":2025,"cited_by_count":49},{"year":2024,"cited_by_count":24},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}