{"id":"https://openalex.org/W4416148980","doi":"https://doi.org/10.1109/tifs.2025.3632218","title":"De <sup>2</sup> Trojan: Deployable Trojan Analysis Tool and Benchmark for the Machine Learning Lifecycle via Decoupling","display_name":"De <sup>2</sup> Trojan: Deployable Trojan Analysis Tool and Benchmark for the Machine Learning Lifecycle via Decoupling","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4416148980","doi":"https://doi.org/10.1109/tifs.2025.3632218"},"language":null,"primary_location":{"id":"doi:10.1109/tifs.2025.3632218","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3632218","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Shiwei Wang","orcid":"https://orcid.org/0000-0002-2777-7392"},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shiwei Wang","raw_affiliation_strings":["School of Cyber Science and Engineering, Xi&#x2019;an Jiaotong University, Xi&#x2019;an, Shaanxi, China"],"raw_orcid":"https://orcid.org/0000-0002-2777-7392","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Xi&#x2019;an Jiaotong University, Xi&#x2019;an, Shaanxi, China","institution_ids":["https://openalex.org/I87445476"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Chenyang Zhao","orcid":"https://orcid.org/0009-0000-9227-1884"},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenyang Zhao","raw_affiliation_strings":["School of Cyber Science and Engineering, Xi&#x2019;an Jiaotong University, Xi&#x2019;an, Shaanxi, China"],"raw_orcid":"https://orcid.org/0009-0000-9227-1884","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Xi&#x2019;an Jiaotong University, Xi&#x2019;an, Shaanxi, China","institution_ids":["https://openalex.org/I87445476"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046723920","display_name":"Chenhao Lin","orcid":"https://orcid.org/0000-0002-6265-7345"},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenhao Lin","raw_affiliation_strings":["School of Cyber Science and Engineering, Xi&#x2019;an Jiaotong University, Xi&#x2019;an, Shaanxi, China"],"raw_orcid":"https://orcid.org/0000-0002-6265-7345","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Xi&#x2019;an Jiaotong University, Xi&#x2019;an, Shaanxi, China","institution_ids":["https://openalex.org/I87445476"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058084433","display_name":"Zhengyu Zhao","orcid":"https://orcid.org/0000-0003-0745-4294"},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhengyu Zhao","raw_affiliation_strings":["School of Cyber Science and Engineering, Xi&#x2019;an Jiaotong University, Xi&#x2019;an, Shaanxi, China"],"raw_orcid":"https://orcid.org/0000-0003-0745-4294","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Xi&#x2019;an Jiaotong University, Xi&#x2019;an, Shaanxi, China","institution_ids":["https://openalex.org/I87445476"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029627390","display_name":"Zheng Yang","orcid":"https://orcid.org/0000-0002-4620-4223"},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zheng Yang","raw_affiliation_strings":["School of Cyber Science and Engineering, Xi&#x2019;an Jiaotong University, Xi&#x2019;an, Shaanxi, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Xi&#x2019;an Jiaotong University, Xi&#x2019;an, Shaanxi, China","institution_ids":["https://openalex.org/I87445476"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100391116","display_name":"Qian Wang","orcid":"https://orcid.org/0000-0002-8967-8525"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qian Wang","raw_affiliation_strings":["School of Cyber Science and Engineering, Wuhan University, Wuhan, Hubei, China"],"raw_orcid":"https://orcid.org/0000-0002-8967-8525","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, Wuhan, Hubei, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101843177","display_name":"Chao Shen","orcid":"https://orcid.org/0000-0002-6959-0569"},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chao Shen","raw_affiliation_strings":["School of Cyber Science and Engineering, Xi&#x2019;an Jiaotong University, Xi&#x2019;an, Shaanxi, China"],"raw_orcid":"https://orcid.org/0000-0002-6959-0569","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Xi&#x2019;an Jiaotong University, Xi&#x2019;an, Shaanxi, China","institution_ids":["https://openalex.org/I87445476"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5075845093","display_name":"Xiaohong Guan","orcid":"https://orcid.org/0000-0002-8826-0362"},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaohong Guan","raw_affiliation_strings":["School of Electronic and Information Engineering, Xi&#x2019;an Jiaotong University, Xi&#x2019;an, Shaanxi, China"],"raw_orcid":"https://orcid.org/0000-0002-8826-0362","affiliations":[{"raw_affiliation_string":"School of Electronic and Information Engineering, Xi&#x2019;an Jiaotong University, Xi&#x2019;an, Shaanxi, China","institution_ids":["https://openalex.org/I87445476"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.17262757,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"20","issue":null,"first_page":"12827","last_page":"12840"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9865999817848206,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9865999817848206,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.004999999888241291,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.001500000013038516,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9811999797821045},{"id":"https://openalex.org/keywords/trojan","display_name":"Trojan","score":0.7753999829292297},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.5394999980926514},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.5313000082969666},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4754999876022339},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.42660000920295715},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.38420000672340393},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.37560001015663147}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9811999797821045},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.7753999829292297},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7577000260353088},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5514000058174133},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5394999980926514},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5313000082969666},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5019999742507935},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4754999876022339},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.42660000920295715},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.38420000672340393},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.37560001015663147},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.35510000586509705},{"id":"https://openalex.org/C133462117","wikidata":"https://www.wikidata.org/wiki/Q4929239","display_name":"Data collection","level":2,"score":0.3093000054359436},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3025999963283539},{"id":"https://openalex.org/C137668524","wikidata":"https://www.wikidata.org/wiki/Q189813","display_name":"Censoring (clinical trials)","level":2,"score":0.30250000953674316},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.29809999465942383},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.2957000136375427},{"id":"https://openalex.org/C205606062","wikidata":"https://www.wikidata.org/wiki/Q5249645","display_name":"Decoupling (probability)","level":2,"score":0.2890999913215637},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.28459998965263367},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2734000086784363},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2705000042915344},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.26420000195503235},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.2572000026702881},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.2558000087738037}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2025.3632218","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3632218","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2528846581","display_name":null,"funder_award_id":"62161160337","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3133778110","display_name":null,"funder_award_id":"62376210","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4208651041","display_name":null,"funder_award_id":"T2341003","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4710690972","display_name":null,"funder_award_id":"2023YFE0209800","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G6034313629","display_name":null,"funder_award_id":"U21B2018","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7155321176","display_name":null,"funder_award_id":"62132011","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7948491709","display_name":null,"funder_award_id":"62206217","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8974508971","display_name":null,"funder_award_id":"62521002","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8983850641","display_name":null,"funder_award_id":"U24B20185","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":61,"referenced_works":["https://openalex.org/W1821462560","https://openalex.org/W2067713319","https://openalex.org/W2108598243","https://openalex.org/W2119112357","https://openalex.org/W2133665775","https://openalex.org/W2302255633","https://openalex.org/W2753783305","https://openalex.org/W2807363941","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W2963163009","https://openalex.org/W2963446712","https://openalex.org/W2966689772","https://openalex.org/W2970335439","https://openalex.org/W2986013765","https://openalex.org/W2990270730","https://openalex.org/W2996800219","https://openalex.org/W3012113073","https://openalex.org/W3022746105","https://openalex.org/W3034258347","https://openalex.org/W3034414373","https://openalex.org/W3034579202","https://openalex.org/W3042368254","https://openalex.org/W3047587361","https://openalex.org/W3048759177","https://openalex.org/W3074128044","https://openalex.org/W3081178496","https://openalex.org/W3083185154","https://openalex.org/W3093137868","https://openalex.org/W3094933146","https://openalex.org/W3107337211","https://openalex.org/W3114686421","https://openalex.org/W3114838227","https://openalex.org/W3115279145","https://openalex.org/W3119557883","https://openalex.org/W3121099749","https://openalex.org/W3152758407","https://openalex.org/W3156793535","https://openalex.org/W3163168187","https://openalex.org/W3165722314","https://openalex.org/W3188772578","https://openalex.org/W3196523899","https://openalex.org/W3215171287","https://openalex.org/W4214537185","https://openalex.org/W4214564822","https://openalex.org/W4214680449","https://openalex.org/W4230172274","https://openalex.org/W4252979261","https://openalex.org/W4283361424","https://openalex.org/W4312329503","https://openalex.org/W4312569687","https://openalex.org/W4312972641","https://openalex.org/W4362573583","https://openalex.org/W4380442442","https://openalex.org/W4385187298","https://openalex.org/W4385679845","https://openalex.org/W4386075973","https://openalex.org/W4386083011","https://openalex.org/W4389159648","https://openalex.org/W4390871934","https://openalex.org/W4393160907"],"related_works":[],"abstract_inverted_index":{"Trojans":[0],"(backdoors)":[1],"are":[2,117,148,203],"known":[3],"to":[4,43,46,71,106,110,134,170,177,213,231,241],"raise":[5],"critical":[6],"security":[7],"concerns":[8],"for":[9,102],"deep":[10],"neural":[11],"networks":[12],"in":[13,151,188,198,239],"machine":[14],"learning":[15],"(ML)":[16],"systems.":[17],"Despite":[18],"the":[19,28,31,37,78,85,89,108,111,121,167,186,199,217,222,236,243,256],"extensive":[20],"backdoor":[21,73,196,233],"methods":[22],"and":[23,75,127,137,154,208,263],"benchmarks,":[24],"existing":[25],"research":[26],"overlooks":[27],"perspective":[29],"of":[30,124,224,253],"ML":[32,79,91,103,112,189,218,257],"lifecycle":[33,104],"(<italic":[34],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[35,57,82],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">i.e.</i>,":[36],"entire":[38],"process":[39,92],"from":[40,88,164,216],"system":[41],"design":[42],"data":[44,200,244],"collection":[45,201],"model":[47,187],"deployment).":[48],"To":[49,220],"address":[50],"this":[51,53],"gap,":[52],"paper":[54],"introduces":[55],"De<sup":[56,81],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">2</sup>Trojan,":[58],"a":[59,68,94,250],"Deployable":[60],"Trojan":[61],"Analysis":[62],"Tool":[63],"via":[64],"Decoupling,":[65],"which":[66],"establishes":[67],"standardized":[69],"pipeline":[70],"investigate":[72],"attacks":[74,146,156,197,262],"defenses":[76],"within":[77,255],"lifecycle.":[80,113,190,219],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">2</sup>Trojan":[83],"decouples":[84],"attack":[86,136],"surface":[87],"general":[90],"through":[93],"stage-first":[95],"hijacking":[96],"approach,":[97],"using":[98,270],"an":[99],"abstract":[100],"interface":[101],"stages":[105,160],"enhance":[107],"deployability":[109],"Besides,":[114],"its":[115],"benefits":[116],"two-fold:":[118],"(1)":[119],"Facilitating":[120],"systematic":[122],"analyses":[123],"multi-stage":[125],"attacks/defenses":[126],"their":[128,162,268],"combinations,":[129,269],"shedding":[130],"light":[131],"on":[132],"how":[133],"improve":[135],"defense":[138,234],"strategies.":[139],"For":[140,191],"example,":[141,192],"we":[142,193,248],"find":[143],"that":[144,195],"current":[145],"(defenses)":[147,157],"not":[149],"effective":[150,230],"continuous":[152],"scenarios,":[153],"combining":[155],"at":[158],"different":[159],"improves":[161],"effectiveness":[163],"30.11%":[165],"(8.63%),":[166],"worst":[168],"cases,":[169],"90.27%":[171],"(68.73%).":[172],"(2)":[173],"Making":[174],"it":[175,209,227],"possible":[176],"identify":[178,194],"potentially":[179],"vulnerable":[180,205],"stages,":[181],"especially":[182],"when":[183],"iteratively":[184],"updating":[185],"stage":[202],"more":[204,211],"than":[206],"expected,":[207],"is":[210,228],"difficult":[212],"remove":[214],"them":[215],"eliminate":[221],"impact":[223],"such":[225],"attacks,":[226],"most":[229],"apply":[232],"during":[235],"deployment":[237],"stage,":[238],"addition":[240],"cleaning":[242],"before":[245],"training.":[246],"Overall,":[247],"present":[249],"comprehensive":[251],"benchmark":[252],"backdoors":[254],"lifecycle,":[258],"involving":[259],"20":[260],"representative":[261],"defenses,":[264],"as":[265,267],"well":[266],"11":[271],"evaluation":[272],"metrics.":[273]},"counts_by_year":[],"updated_date":"2025-12-10T02:45:41.426853","created_date":"2025-11-12T00:00:00"}