{"id":"https://openalex.org/W7148510715","doi":"https://doi.org/10.1016/j.patcog.2026.113665","title":"Rethinking the trigger of backdoor attacks: Towards physical backdoor threats","display_name":"Rethinking the trigger of backdoor attacks: Towards physical backdoor threats","publication_year":2026,"publication_date":"2026-04-02","ids":{"openalex":"https://openalex.org/W7148510715","doi":"https://doi.org/10.1016/j.patcog.2026.113665"},"language":"en","primary_location":{"id":"doi:10.1016/j.patcog.2026.113665","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.patcog.2026.113665","pdf_url":null,"source":{"id":"https://openalex.org/S414566","display_name":"Pattern Recognition","issn_l":"0031-3203","issn":["0031-3203","1873-5142"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Pattern Recognition","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.patcog.2026.113665","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Yiming Li","orcid":"https://orcid.org/0000-0002-2258-265X"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":true,"raw_author_name":"Yiming Li","raw_affiliation_strings":["Independent Researcher, China","Nanyang Technological University, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-2258-265X","affiliations":[{"raw_affiliation_string":"Independent Researcher, China","institution_ids":[]},{"raw_affiliation_string":"Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039795462","display_name":"Mingyan Zhu","orcid":"https://orcid.org/0009-0009-8060-4237"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingyan Zhu","raw_affiliation_strings":["Tsinghua University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132805714","display_name":"Shu-Tao Xia","orcid":null},"institutions":[{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shu-Tao Xia","raw_affiliation_strings":["The Research Center of Artificial Intelligence, Peng Cheng Laboratory, China","Tsinghua University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Research Center of Artificial Intelligence, Peng Cheng Laboratory, China","institution_ids":["https://openalex.org/I4210136793"]},{"raw_affiliation_string":"Tsinghua University, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132789102","display_name":"Zhifeng Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhifeng Li","raw_affiliation_strings":["Independent Researcher, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Independent Researcher, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100564870","display_name":"Zhan Qin","orcid":null},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhan Qin","raw_affiliation_strings":["Zhejiang University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5132830641","display_name":"Dacheng Tao","orcid":null},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Dacheng Tao","raw_affiliation_strings":["Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I172675005"],"apc_list":{"value":2710,"currency":"USD","value_usd":2710},"apc_paid":{"value":2710,"currency":"USD","value_usd":2710},"fwci":12.1051,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.97915722,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"179","issue":null,"first_page":"113665","last_page":"113665"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9778000116348267,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9778000116348267,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.004399999976158142,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.0035000001080334187,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9998000264167786},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.2824999988079071},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.25529998540878296},{"id":"https://openalex.org/keywords/transformation","display_name":"Transformation (genetics)","score":0.2337000072002411}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9998000264167786},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6065000295639038},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5325000286102295},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.2824999988079071},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.27959999442100525},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.25529998540878296},{"id":"https://openalex.org/C204241405","wikidata":"https://www.wikidata.org/wiki/Q461499","display_name":"Transformation (genetics)","level":3,"score":0.2337000072002411},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.19359999895095825},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.16539999842643738},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.16269999742507935}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.patcog.2026.113665","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.patcog.2026.113665","pdf_url":null,"source":{"id":"https://openalex.org/S414566","display_name":"Pattern Recognition","issn_l":"0031-3203","issn":["0031-3203","1873-5142"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Pattern Recognition","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1016/j.patcog.2026.113665","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.patcog.2026.113665","pdf_url":null,"source":{"id":"https://openalex.org/S414566","display_name":"Pattern Recognition","issn_l":"0031-3203","issn":["0031-3203","1873-5142"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Pattern Recognition","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.4504052996635437,"id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G1254977544","display_name":null,"funder_award_id":"2024C01169","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2183328864","display_name":null,"funder_award_id":"U2441240","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G659122245","display_name":null,"funder_award_id":"62441238","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G824329526","display_name":null,"funder_award_id":"62571298","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322392","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549"},{"id":"https://openalex.org/F4320322942","display_name":"Chinese University of Hong Kong","ror":"https://ror.org/00t33hh48"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W1920235975","https://openalex.org/W2067713319","https://openalex.org/W2616247523","https://openalex.org/W2809432408","https://openalex.org/W2888527098","https://openalex.org/W2942091739","https://openalex.org/W2954996726","https://openalex.org/W3016970897","https://openalex.org/W3024531173","https://openalex.org/W3214911933","https://openalex.org/W4293011327","https://openalex.org/W4323655037","https://openalex.org/W4366831221","https://openalex.org/W4406683406","https://openalex.org/W4408201601","https://openalex.org/W4412098142"],"related_works":[],"abstract_inverted_index":{"Backdoor":[0],"attacks":[1,64,129],"intend":[2],"to":[3,55,179,221,240],"inject":[4],"hidden":[5,26],"backdoor":[6,27,46,63,204,238],"into":[7],"the":[8,15,25,31,36,45,66,75,81,88,112,121,135,139,144,157,174,193,200,235,242],"deep":[9],"neural":[10],"networks":[11],"(DNNs),":[12],"such":[13,181],"that":[14,105,155,192,227],"predictions":[16],"of":[17,58,68,143,156,203,237,244],"infected":[18,37],"models":[19,38],"will":[20],"be":[21,152],"maliciously":[22],"changed":[23],"if":[24],"is":[28,48,109,117],"activated":[29],"by":[30,99,173],"attacker-specified":[32],"trigger":[33,101,113,145],"pattern.":[34],"Since":[35],"behave":[39],"normally":[40],"on":[41,185,217,234],"predicting":[42],"benign":[43],"samples,":[44],"attack":[47,97,107,167],"stealthy":[49],"and":[50,77,84,141,247],"therefore":[51],"a":[52,165],"serious":[53],"threat":[54],"practical":[56],"applications":[57],"DNNs.":[59,249],"Currently,":[60],"most":[61],"existing":[62],"adopted":[65,195],"setting":[67],"static":[69],"trigger,":[70],"i.e":[71],".,":[72],"triggers":[73],"across":[74],"training":[76],"testing":[78,115],"images":[79,116],"follow":[80],"same":[82,89],"appearance":[83,142],"are":[85,130],"located":[86],"in":[87,114,134,147],"area.":[90],"In":[91],"this":[92,96,106,186],"paper,":[93],"we":[94,163,189,213],"revisit":[95],"paradigm":[98,108],"analyzing":[100],"characteristics.":[102],"We":[103,225],"demonstrate":[104],"vulnerable":[110],"when":[111],"not":[118],"consistent":[119],"with":[120],"one":[122,158],"used":[123,159],"for":[124,160],"training.":[125,161],"As":[126],"such,":[127],"those":[128],"far":[131],"less":[132],"effective":[133],"physical":[136],"world,":[137],"where":[138],"location":[140],"contained":[146],"digitized":[148],"test":[149],"samples":[150],"may":[151,198],"different":[153],"from":[154],"Besides,":[162],"introduce":[164],"plug-in":[166,187],"enhancement":[168],"module":[169],"during":[170],"training,":[171],"inspired":[172],"expectation":[175],"over":[176],"transformation":[177],"(EOT),":[178],"alleviate":[180],"inconsistency":[182],"vulnerability.":[183],"Based":[184],"module,":[188],"also":[190],"reveal":[191],"widely":[194],"data":[196],"augmentation":[197],"exacerbate":[199],"security":[201],"risks":[202],"attacks,":[205,239],"although":[206],"it":[207],"can":[208],"enhance":[209],"model":[210],"performance.":[211],"Moreover,":[212],"evaluate":[214],"our":[215,228],"methods":[216],"multiple":[218],"benchmark":[219],"datasets":[220],"verify":[222],"their":[223],"effectiveness.":[224],"hope":[226],"work":[229],"could":[230],"inspire":[231],"more":[232,245],"explorations":[233],"properties":[236],"facilitate":[241],"design":[243],"robust":[246],"secure":[248]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-06-14T06:11:07.267592","created_date":"2026-04-03T00:00:00"}