[18] H. Souri, L. Fowl, R. Chellappa, M. Goldblum, and T. Goldstein, "Sleeper agent: Scalable hidden trigger backdoors for neural networks trained from scratch," Advances in Neural Information Processing Systems, vol. 35, pp. 19-165-19-178, 2022.
[19] X. Qi, T. Xie, Y. Li, S. Mahloujifar, and P. Mittal, "Revisiting the assumption of latent separability for backdoor defenses," in The eleventh international conference on learning representations, 2023.
[20] Y. Gao, C. Xu, D. Wang, S. Chen, D. C. Ranasinghe, and S. Nepal, "Strip: A defence against trojan attacks on deep neural networks," in Proceedings of the 35th Annual Computer Security Applications Conference, 2019, pp. 113-125.
[21] F. Qi, Y. Chen, M. Li, Y. Yao, Z. Liu, and M. Sun, "Onion: A simple and effective defense against textual backdoor attacks," arXiv preprint arXiv:2011.10369, 2020.
[22] R. Cai, Z. Zhang, T. Chen, X. Chen, and Z. Wang, “Randomized channel shuffling: Minimal-overhead backdoor attack detection without clean datasets,” Advances in Neural Information Processing Systems, vol. 35, pp. 33876-33889, 2022.
[23] W. Yang, Y. Lin, P. Li, J. Zhou, and X. Sun, "Rethinking stealthiness of backdoor attack against nlp models," in Proceedings of the 59th Annual Meeting of the Association for Computational Linguistics and the 11th International Joint Conference on Natural Language Processing (Volume 1: Long Papers), 2021, pp. 5543-5557.
[24] J. Guo, Y. Li, X. Chen, H. Guo, L. Sun, and C. Liu, "Scale-up: An efficient black-box input-level backdoor detection via analyzing scaled prediction consistency," in The eleventh international conference on learning representations, 2023.
[25] X. Sheng, Z. Han, P. Li, and X. Chang, “A survey on backdoor attack and defense in natural language processing,” arXiv preprint arXiv:2211.11958, 2022.
[26] K. J. Cheoi, H. Choi, and J. Ko, "Empirical remarks on the translational equivariance of convolutional layers," Applied Sciences, vol. 10, no. 9, p. 3161, 2020.
[27] E. Diao, J. Ding, and V. Tarokh, “Restricted recurrent neural networks,” in 2019 IEEE international conference on big data (big data). IEEE, 2019, pp. 56–63.
[28] ——, “Drasic: Distributed recurrent autoencoder for scalable image compression,” in 2020 Data Compression Conference (DCC). IEEE, 2020, pp. 3-12.
[29] A. Graves and A. Graves, “Long short-term memory,” Supervised sequence labelling with recurrent neural networks, pp. 37–45, 2012.
[30] J. Wang, M. Xue, R. Culhane, E. Diao, J. Ding, and V. Tarokh, "Speech emotion recognition with dual-sequence LSTM architecture," in ICASSP 2020-2020 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP). IEEE, 2020, pp. 6474-6478.
[31] J. Devlin, M.-W. Chang, K. Lee, and K. Toutanova, "Bert: Pre-training of deep bidirectional transformers for language understanding," arXiv preprint arXiv:1810.04805, 2018.
[32] V. Vovk, A. Gammerman, and G. Shafer, Algorithmic learning in a random world. Springer, 2005, vol. 29.
[33] J. Lei and L. Wasserman, "Distribution-free prediction bands for non-parametric regression," Journal of the Royal Statistical Society: Series B: Statistical Methodology, pp. 71-96, 2014.
[34] A. Krizhevsky, G. Hinton et al., "Learning multiple layers of features from tiny images," 2009.
[35] J. Stallkamp, M. Schlipsing, J. Salmen, and C. Igel, "Man vs. computer: Benchmarking machine learning algorithms for traffic sign recognition," Neural networks, vol. 32, pp. 323-332, 2012.
[36] Y. Le and X. Yang, "Tiny imagenet visual recognition challenge," CS 231N, vol. 7, no. 7, p. 3, 2015.
[37] R. Socher, A. Perelygin, J. Wu, J. Chuang, C. D. Manning, A. Y. Ng, and C. Potts, "Recursive deep models for semantic compositionality over a sentiment treebank," in Proceedings of the 2013 conference on empirical methods in natural language processing, 2013, pp. 1631-1642.