@inproceedings{obd:untargeted,
  title={Untargeted backdoor attack against object detection},
  author={Luo, Chengxiao and Li, Yiming and Jiang, Yong and Xia, Shu-Tao},
  booktitle={ICASSP 2023-2023 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)},
  pages={1--5},
  year={2023},
  organization={IEEE}
}
@inproceedings{obd:baddet,
  title={Baddet: Backdoor attacks on object detection},
  author={Chan, Shih-Han and Dong, Yinpeng and Zhu, Jun and Zhang, Xiaolu and Zhou, Jun},
  booktitle={European Conference on Computer Vision},
  pages={396--412},
  year={2022},
  organization={Springer}
}
@inproceedings{obd:rotatebackdoor,
  title={Just rotate it: Deploying backdoor attacks via rotation transformation},
  author={Wu, Tong and Wang, Tianhao and Sehwag, Vikash and Mahloujifar, Saeed and Mittal, Prateek},
  booktitle={Proceedings of the 15th ACM Workshop on Artificial Intelligence and Security},
  pages={91--102},
  year={2022}
}
@article{obd:aligning,
  title={Backdoor Attack against Object Detection with Clean Annotation},
  author={Cheng, Yize and Hu, Wenbin and Cheng, Minhao},
  journal={arXiv preprint arXiv:2307.10487},
  year={2023}
}
@article{obd:dangerouscloaking,
  title={Dangerous cloaking: Natural trigger based backdoor attacks on object detectors in the physical world},
  author={Ma, Hua and Li, Yinshan and Gao, Yansong and Abuadbba, Alsharif and Zhang, Zhi and Fu, Anmin and Kim, Hyoungshick and Al-Sarawi, Said F and Surya, Nepal and Abbott, Derek},
  journal={arXiv preprint arXiv:2201.08619},
  year={2022}
}





@article{bd:badnets,
  title={Badnets: Evaluating backdooring attacks on deep neural networks},
  author={Gu, Tianyu and Liu, Kang and Dolan-Gavitt, Brendan and Garg, Siddharth},
  journal={IEEE Access},
  volume={7},
  pages={47230--47244},
  year={2019},
  publisher={IEEE}
}
@inproceedings{bd:trojaning,
  title={Trojaning attack on neural networks},
  author={Liu, Yingqi and Ma, Shiqing and Aafer, Yousra and Lee, Wen-Chuan and Zhai, Juan and Wang, Weihang and Zhang, Xiangyu},
  booktitle={25th Annual Network And Distributed System Security Symposium (NDSS 2018)},
  year={2018},
  organization={Internet Soc}
}
@inproceedings{bd:lira,
  title={Lira: Learnable, imperceptible and robust backdoor attacks},
  author={Doan, Khoa and Lao, Yingjie and Zhao, Weijie and Li, Ping},
  booktitle={Proceedings of the IEEE/CVF international conference on computer vision},
  pages={11966--11976},
  year={2021}
}
@article{bd:blended,
  title={Targeted backdoor attacks on deep learning systems using data poisoning},
  author={Chen, Xinyun and Liu, Chang and Li, Bo and Lu, Kimberly and Song, Dawn},
  journal={arXiv preprint arXiv:1712.05526},
  year={2017}
}
@article{bd:wanet,
  title={Wanet--imperceptible warping-based backdoor attack},
  author={Nguyen, Anh and Tran, Anh},
  journal={arXiv preprint arXiv:2102.10369},
  year={2021}
}
@inproceedings{bd:reflection,
  title={Reflection backdoor: A natural backdoor attack on deep neural networks},
  author={Liu, Yunfei and Ma, Xingjun and Bailey, James and Lu, Feng},
  booktitle={Computer Vision--ECCV 2020: 16th European Conference, Glasgow, UK, August 23--28, 2020, Proceedings, Part X 16},
  pages={182--199},
  year={2020},
  organization={Springer}
}
@inproceedings{bd:sig,
  title={A new backdoor attack in cnns by training set corruption without label poisoning},
  author={Barni, Mauro and Kallas, Kassem and Tondi, Benedetta},
  booktitle={2019 IEEE International Conference on Image Processing (ICIP)},
  pages={101--105},
  year={2019},
  organization={IEEE}
}
@inproceedings{bd:blind,
  title={Blind backdoors in deep learning models},
  author={Bagdasaryan, Eugene and Shmatikov, Vitaly},
  booktitle={30th USENIX Security Symposium (USENIX Security 21)},
  pages={1505--1521},
  year={2021}
}
@inproceedings{bd:weightperturbations,
  title={Backdooring convolutional neural networks via targeted weight perturbations},
  author={Dumford, Jacob and Scheirer, Walter},
  booktitle={2020 IEEE International Joint Conference on Biometrics (IJCB)},
  pages={1--9},
  year={2020},
  organization={IEEE}
}
@article{bd:weightpoisoning,
  title={Weight poisoning attacks on pre-trained models},
  author={Kurita, Keita and Michel, Paul and Neubig, Graham},
  journal={arXiv preprint arXiv:2004.06660},
  year={2020}
}
@inproceedings{bd:neuraltrojan,
  title={Neural trojans},
  author={Liu, Yuntao and Xie, Yang and Srivastava, Ankur},
  booktitle={2017 IEEE International Conference on Computer Design (ICCD)},
  pages={45--48},
  year={2017},
  organization={IEEE}
}




@inproceedings{od:yolov1,
  title={You only look once: Unified, real-time object detection},
  author={Redmon, Joseph and Divvala, Santosh and Girshick, Ross and Farhadi, Ali},
  booktitle={Proceedings of the IEEE conference on computer vision and pattern recognition},
  pages={779--788},
  year={2016}
}
@article{od:yolov3,
  title={Yolov3: An incremental improvement},
  author={Redmon, Joseph and Farhadi, Ali},
  journal={arXiv preprint arXiv:1804.02767},
  year={2018}
}
@misc{od:yolov5,
  author = {Ultralytics},
  title = {{YOLOv5}: {A} state-of-the-art real-time object detection system},
  year = {2021},
  howpublished = {\url{https://docs.ultralytics.com}}
}
@inproceedings{od:fastrcnn,
  title={Fast r-cnn},
  author={Girshick, Ross},
  booktitle={Proceedings of the IEEE international conference on computer vision},
  pages={1440--1448},
  year={2015}
}
@article{od:fasterrcnn,
  title={Faster r-cnn: Towards real-time object detection with region proposal networks},
  author={Ren, Shaoqing and He, Kaiming and Girshick, Ross and Sun, Jian},
  journal={Advances in neural information processing systems},
  volume={28},
  year={2015}
}
@article{od:rfcn,
  title={R-fcn: Object detection via region-based fully convolutional networks},
  author={Dai, Jifeng and Li, Yi and He, Kaiming and Sun, Jian},
  journal={Advances in neural information processing systems},
  volume={29},
  year={2016}
}
@inproceedings{od:maskrcnn,
  title={Mask r-cnn},
  author={He, Kaiming and Gkioxari, Georgia and Doll{\'a}r, Piotr and Girshick, Ross},
  booktitle={Proceedings of the IEEE international conference on computer vision},
  pages={2961--2969},
  year={2017}
}
@inproceedings{od:ssd,
  title={Ssd: Single shot multibox detector},
  author={Liu, Wei and Anguelov, Dragomir and Erhan, Dumitru and Szegedy, Christian and Reed, Scott and Fu, Cheng-Yang and Berg, Alexander C},
  booktitle={Computer Vision--ECCV 2016: 14th European Conference, Amsterdam, The Netherlands, October 11--14, 2016, Proceedings, Part I 14},
  pages={21--37},
  year={2016},
  organization={Springer}
}
@inproceedings{od:retinanet,
  title={Focal loss for dense object detection},
  author={Lin, Tsung-Yi and Goyal, Priya and Girshick, Ross and He, Kaiming and Doll{\'a}r, Piotr},
  booktitle={Proceedings of the IEEE international conference on computer vision},
  pages={2980--2988},
  year={2017}
}






@inproceedings{def:strip,
  title={Strip: A defence against trojan attacks on deep neural networks},
  author={Gao, Yansong and Xu, Change and Wang, Derui and Chen, Shiping and Ranasinghe, Damith C and Nepal, Surya},
  booktitle={Proceedings of the 35th Annual Computer Security Applications Conference},
  pages={113--125},
  year={2019}
}
@inproceedings{def:neuralcleanse,
  title={Neural cleanse: Identifying and mitigating backdoor attacks in neural networks},
  author={Wang, Bolun and Yao, Yuanshun and Shan, Shawn and Li, Huiying and Viswanath, Bimal and Zheng, Haitao and Zhao, Ben Y},
  booktitle={2019 IEEE Symposium on Security and Privacy (SP)},
  pages={707--723},
  year={2019},
  organization={IEEE}
}
@inproceedings{def:finepruning,
  title={Fine-pruning: Defending against backdooring attacks on deep neural networks},
  author={Liu, Kang and Dolan-Gavitt, Brendan and Garg, Siddharth},
  booktitle={International symposium on research in attacks, intrusions, and defenses},
  pages={273--294},
  year={2018},
  organization={Springer}
}
@article{def:spectralsignature,
  title={Spectral signatures in backdoor attacks},
  author={Tran, Brandon and Li, Jerry and Madry, Aleksander},
  journal={Advances in neural information processing systems},
  volume={31},
  year={2018}
}
@inproceedings{def:gradcam,
  title={Grad-cam: Visual explanations from deep networks via gradient-based localization},
  author={Selvaraju, Ramprasaath R and Cogswell, Michael and Das, Abhishek and Vedantam, Ramakrishna and Parikh, Devi and Batra, Dhruv},
  booktitle={Proceedings of the IEEE international conference on computer vision},
  pages={618--626},
  year={2017}
}
@article{def:rethinking,
  title={Rethinking the trigger of backdoor attack},
  author={Li, Yiming and Zhai, Tongqing and Wu, Baoyuan and Jiang, Yong and Li, Zhifeng and Xia, Shutao},
  journal={arXiv preprint arXiv:2004.04692},
  year={2020}
}





@misc{data:2007pascal,
  title={The PASCAL Visual Object Classes Challenge 2007 (VOC2007) Results},
  author={Everingham, Mark and Van Gool, Luc and Williams, Christopher K. I. and Winn, John and Zisserman, Andrew},
  year={2007},
  howpublished={\url{http://www.pascal-network.org/challenges/VOC/voc2007/workshop/index.html}}
}
@misc{data:2012pascal,
  title={The PASCAL Visual Object Classes Challenge 2012 (VOC2012) Results},
  author={Everingham, Mark and Van Gool, Luc and Williams, Christopher K. I. and Winn, John and Zisserman, Andrew},
  year={2012},
  howpublished={\url{http://www.pascal-network.org/challenges/VOC/voc2012/workshop/index.html}}
}
@inproceedings{data:coco,
  title={Microsoft coco: Common objects in context},
  author={Lin, Tsung-Yi and Maire, Michael and Belongie, Serge and Hays, James and Perona, Pietro and Ramanan, Deva and Doll{\'a}r, Piotr and Zitnick, C Lawrence},
  booktitle={Computer Vision--ECCV 2014: 13th European Conference, Zurich, Switzerland, September 6-12, 2014, Proceedings, Part V 13},
  pages={740--755},
  year={2014},
  organization={Springer}
}





@article{survey:backdoorlearning,
  title={Backdoor learning: A survey},
  author={Li, Yiming and Jiang, Yong and Li, Zhifeng and Xia, Shu-Tao},
  journal={IEEE Transactions on Neural Networks and Learning Systems},
  year={2022},
  publisher={IEEE}
}
@article{survey:objectdetection20years,
  title={Object detection in 20 years: A survey},
  author={Zou, Zhengxia and Chen, Keyan and Shi, Zhenwei and Guo, Yuhong and Ye, Jieping},
  journal={Proceedings of the IEEE},
  year={2023},
  publisher={IEEE}
}