@inproceedings{obd:untargeted,
  title = {{Untargeted backdoor attack against object detection}},
  author = {Luo, Chengxiao and Li, Yiming and Jiang, Yong and Xia, Shu-Tao},
  booktitle = {ICASSP 2023-2023 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)},
  pages = {1--5},
  year = {2023},
  organization = {IEEE},
}


@inproceedings{obd:baddet,
  title = {{Baddet: Backdoor attacks on object detection}},
  author = {Chan, Shih-Han and Dong, Yinpeng and Zhu, Jun and Zhang, Xiaolu and Zhou, Jun},
  booktitle = {European Conference on Computer Vision},
  pages = {396--412},
  year = {2022},
  organization = {Springer},
}


@inproceedings{obd:rotatebackdoor,
  title = {{Just rotate it: Deploying backdoor attacks via rotation transformation}},
  author = {Wu, Tong and Wang, Tianhao and Sehwag, Vikash and Mahloujifar, Saeed and Mittal, Prateek},
  booktitle = {Proceedings of the 15th ACM Workshop on Artificial Intelligence and Security},
  pages = {91--102},
  year = {2022},
}


@article{obd:aligning,
  title = {{Backdoor Attack against Object Detection with Clean Annotation}},
  author = {Cheng, Yize and Hu, Wenbin and Cheng, Minhao},
  journal = {arXiv preprint arXiv:2307.10487},
  year = {2023},
}


@article{obd:dangerouscloaking,
  title = {{Dangerous cloaking: Natural trigger based backdoor attacks on object detectors in the physical world}},
  author = {Ma, Hua and Li, Yinshan and Gao, Yansong and Abuadbba, Alsharif and Zhang, Zhi and Fu, Anmin and Kim, Hyoungshick and Al-Sarawi, Said F and Surya, Nepal and Abbott, Derek},
  journal = {arXiv preprint arXiv:2201.08619},
  year = {2022},
}


@article{bd:badnets,
  title = {{Badnets: Evaluating backdooring attacks on deep neural networks}},
  author = {Gu, Tianyu and Liu, Kang and Dolan-Gavitt, Brendan and Garg, Siddharth},
  journal = {IEEE Access},
  volume = {7},
  pages = {47230--47244},
  year = {2019},
  publisher = {IEEE},
}


@inproceedings{bd:trojaning,
  title = {{Trojaning attack on neural networks}},
  author = {Liu, Yingqi and Ma, Shiqing and Aafer, Yousra and Lee, Wen-Chuan and Zhai, Juan and Wang, Weihang and Zhang, Xiangyu},
  booktitle = {25th Annual Network And Distributed System Security Symposium (NDSS 2018)},
  year = {2018},
  organization = {Internet Soc},
}


@inproceedings{bd:lira,
  title = {{Lira: Learnable, imperceptible and robust backdoor attacks}},
  author = {Doan, Khoa and Lao, Yingjie and Zhao, Weijie and Li, Ping},
  booktitle = {Proceedings of the IEEE/CVF international conference on computer vision},
  pages = {11966--11976},
  year = {2021},
}


@article{bd:blended,
  title = {{Targeted backdoor attacks on deep learning systems using data poisoning}},
  author = {Chen, Xinyun and Liu, Chang and Li, Bo and Lu, Kimberly and Song, Dawn},
  journal = {arXiv preprint arXiv:1712.05526},
  year = {2017},
}


@article{bd:wanet,
  title = {{Wanet--imperceptible warping-based backdoor attack}},
  author = {Nguyen, Anh and Tran, Anh},
  journal = {arXiv preprint arXiv:2102.10369},
  year = {2021},
}


@inproceedings{bd:reflection,
  title = {{Reflection backdoor: A natural backdoor attack on deep neural networks}},
  author = {Liu, Yunfei and Ma, Xingjun and Bailey, James and Lu, Feng},
  booktitle = {Computer Vision--ECCV 2020: 16th European Conference, Glasgow, UK, August 23--28, 2020, Proceedings, Part X 16},
  pages = {182--199},
  year = {2020},
  organization = {Springer},
}


@inproceedings{bd:sig,
  title = {{A new backdoor attack in cnns by training set corruption without label poisoning}},
  author = {Barni, Mauro and Kallas, Kassem and Tondi, Benedetta},
  booktitle = {2019 IEEE International Conference on Image Processing (ICIP)},
  pages = {101--105},
  year = {2019},
  organization = {IEEE},
}


@inproceedings{bd:blind,
  title = {{Blind backdoors in deep learning models}},
  author = {Bagdasaryan, Eugene and Shmatikov, Vitaly},
  booktitle = {30th USENIX Security Symposium (USENIX Security 21)},
  pages = {1505--1521},
  year = {2021},
}


@inproceedings{bd:weightperturbations,
  title = {{Backdooring convolutional neural networks via targeted weight perturbations}},
  author = {Dumford, Jacob and Scheirer, Walter},
  booktitle = {2020 IEEE International Joint Conference on Biometrics (IJCB)},
  pages = {1--9},
  year = {2020},
  organization = {IEEE},
}


@article{bd:weightpoisoning,
  title = {{Weight poisoning attacks on pre-trained models}},
  author = {Kurita, Keita and Michel, Paul and Neubig, Graham},
  journal = {arXiv preprint arXiv:2004.06660},
  year = {2020},
}


@inproceedings{bd:neuraltrojan,
  title = {{Neural trojans}},
  author = {Liu, Yuntao and Xie, Yang and Srivastava, Ankur},
  booktitle = {2017 IEEE International Conference on Computer Design (ICCD)},
  pages = {45--48},
  year = {2017},
  organization = {IEEE},
}


@inproceedings{od:yolov1,
  title = {{You only look once: Unified, real-time object detection}},
  author = {Redmon, Joseph and Divvala, Santosh and Girshick, Ross and Farhadi, Ali},
  booktitle = {Proceedings of the IEEE conference on computer vision and pattern recognition},
  pages = {779--788},
  year = {2016},
}


@article{od:yolov3,
  title = {{Yolov3: An incremental improvement}},
  author = {Redmon, Joseph and Farhadi, Ali},
  journal = {arXiv preprint arXiv:1804.02767},
  year = {2018},
}


@misc{od:yolov5,
  author = {Ultralytics},
  title = {{{YOLOv5}: {A} state-of-the-art real-time object detection system}},
  year = {2021},
  howpublished = {\url{https://docs.ultralytics.com}},
}


@inproceedings{od:fastrcnn,
  title = {{Fast r-cnn}},
  author = {Girshick, Ross},
  booktitle = {Proceedings of the IEEE international conference on computer vision},
  pages = {1440--1448},
  year = {2015},
}


@article{od:fasterrcnn,
  title = {{Faster r-cnn: Towards real-time object detection with region proposal networks}},
  author = {Ren, Shaoqing and He, Kaiming and Girshick, Ross and Sun, Jian},
  journal = {Advances in neural information processing systems},
  volume = {28},
  year = {2015},
}


@article{od:rfcn,
  title = {{R-fcn: Object detection via region-based fully convolutional networks}},
  author = {Dai, Jifeng and Li, Yi and He, Kaiming and Sun, Jian},
  journal = {Advances in neural information processing systems},
  volume = {29},
  year = {2016},
}


@inproceedings{od:maskrcnn,
  title = {{Mask r-cnn}},
  author = {He, Kaiming and Gkioxari, Georgia and Doll{\'a}r, Piotr and Girshick, Ross},
  booktitle = {Proceedings of the IEEE international conference on computer vision},
  pages = {2961--2969},
  year = {2017},
}


@inproceedings{od:ssd,
  title = {{Ssd: Single shot multibox detector}},
  author = {Liu, Wei and Anguelov, Dragomir and Erhan, Dumitru and Szegedy, Christian and Reed, Scott and Fu, Cheng-Yang and Berg, Alexander C},
  booktitle = {Computer Vision--ECCV 2016: 14th European Conference, Amsterdam, The Netherlands, October 11--14, 2016, Proceedings, Part I 14},
  pages = {21--37},
  year = {2016},
  organization = {Springer},
}


@inproceedings{od:retinanet,
  title = {{Focal loss for dense object detection}},
  author = {Lin, Tsung-Yi and Goyal, Priya and Girshick, Ross and He, Kaiming and Doll{\'a}r, Piotr},
  booktitle = {Proceedings of the IEEE international conference on computer vision},
  pages = {2980--2988},
  year = {2017},
}


@inproceedings{def:strip,
  title = {{Strip: A defence against trojan attacks on deep neural networks}},
  author = {Gao, Yansong and Xu, Change and Wang, Derui and Chen, Shiping and Ranasinghe, Damith C and Nepal, Surya},
  booktitle = {Proceedings of the 35th Annual Computer Security Applications Conference},
  pages = {113--125},
  year = {2019},
}


@inproceedings{def:neuralcleanse,
  title = {{Neural cleanse: Identifying and mitigating backdoor attacks in neural networks}},
  author = {Wang, Bolun and Yao, Yuanshun and Shan, Shawn and Li, Huiying and Viswanath, Bimal and Zheng, Haitao and Zhao, Ben Y},
  booktitle = {2019 IEEE Symposium on Security and Privacy (SP)},
  pages = {707--723},
  year = {2019},
  organization = {IEEE},
}


@inproceedings{def:finepruning,
  title = {{Fine-pruning: Defending against backdooring attacks on deep neural networks}},
  author = {Liu, Kang and Dolan-Gavitt, Brendan and Garg, Siddharth},
  booktitle = {International symposium on research in attacks, intrusions, and defenses},
  pages = {273--294},
  year = {2018},
  organization = {Springer},
}


@article{def:spectralsignature,
  title = {{Spectral signatures in backdoor attacks}},
  author = {Tran, Brandon and Li, Jerry and Madry, Aleksander},
  journal = {Advances in neural information processing systems},
  volume = {31},
  year = {2018},
}


@inproceedings{def:gradcam,
  title = {{Grad-cam: Visual explanations from deep networks via gradient-based localization}},
  author = {Selvaraju, Ramprasaath R and Cogswell, Michael and Das, Abhishek and Vedantam, Ramakrishna and Parikh, Devi and Batra, Dhruv},
  booktitle = {Proceedings of the IEEE international conference on computer vision},
  pages = {618--626},
  year = {2017},
}


@article{def:rethinking,
  title = {{Rethinking the trigger of backdoor attack}},
  author = {Li, Yiming and Zhai, Tongqing and Wu, Baoyuan and Jiang, Yong and Li, Zhifeng and Xia, Shutao},
  journal = {arXiv preprint arXiv:2004.04692},
  year = {2020},
}


@misc{data:2007pascal,
  title = {{The PASCAL Visual Object Classes Challenge 2007 (VOC2007) Results}},
  author = {Everingham, Mark and Van Gool, Luc and Williams, Christopher K. I. and Winn, John and Zisserman, Andrew},
  year = {2007},
  howpublished = {\url{http://www.pascal-network.org/challenges/VOC/voc2007/workshop/index.html}},
}


@misc{data:2012pascal,
  title = {{The PASCAL Visual Object Classes Challenge 2012 (VOC2012) Results}},
  author = {Everingham, Mark and Van Gool, Luc and Williams, Christopher K. I. and Winn, John and Zisserman, Andrew},
  year = {2012},
  howpublished = {\url{http://www.pascal-network.org/challenges/VOC/voc2012/workshop/index.html}},
}


@inproceedings{data:coco,
  title = {{Microsoft coco: Common objects in context}},
  author = {Lin, Tsung-Yi and Maire, Michael and Belongie, Serge and Hays, James and Perona, Pietro and Ramanan, Deva and Doll{\'a}r, Piotr and Zitnick, C Lawrence},
  booktitle = {Computer Vision--ECCV 2014: 13th European Conference, Zurich, Switzerland, September 6-12, 2014, Proceedings, Part V 13},
  pages = {740--755},
  year = {2014},
  organization = {Springer},
}


@article{survey:backdoorlearning,
  title = {{Backdoor learning: A survey}},
  author = {Li, Yiming and Jiang, Yong and Li, Zhifeng and Xia, Shu-Tao},
  journal = {IEEE Transactions on Neural Networks and Learning Systems},
  year = {2022},
  publisher = {IEEE},
}


@article{survey:objectdetection20years,
  title = {{Object detection in 20 years: A survey}},
  author = {Zou, Zhengxia and Chen, Keyan and Shi, Zhenwei and Guo, Yuhong and Ye, Jieping},
  journal = {Proceedings of the IEEE},
  year = {2023},
  publisher = {IEEE},
}
