{"id":"https://openalex.org/W4415014307","doi":"https://doi.org/10.1109/iccv51701.2025.00351","title":"Backdooring Self-Supervised Contrastive Learning by Noisy Alignment","display_name":"Backdooring Self-Supervised Contrastive Learning by Noisy Alignment","publication_year":2025,"publication_date":"2025-10-19","ids":{"openalex":"https://openalex.org/W4415014307","doi":"https://doi.org/10.1109/iccv51701.2025.00351"},"language":"en","primary_location":{"id":"doi:10.1109/iccv51701.2025.00351","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccv51701.2025.00351","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/CVF International Conference on Computer Vision (ICCV)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2508.14015","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101745883","display_name":"Tuo Chen","orcid":"https://orcid.org/0000-0003-1086-9458"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tuo Chen","raw_affiliation_strings":["Southeast University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southeast University","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110740283","display_name":"Jie Gui","orcid":"https://orcid.org/0000-0002-9450-1759"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jie Gui","raw_affiliation_strings":["Southeast University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southeast University","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084617283","display_name":"Minjing Dong","orcid":"https://orcid.org/0009-0003-1717-818X"},"institutions":[{"id":"https://openalex.org/I168719708","display_name":"City University of Hong Kong","ror":"https://ror.org/03q8dnn23","country_code":"HK","type":"education","lineage":["https://openalex.org/I168719708"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Minjing Dong","raw_affiliation_strings":["City University of Hong Kong"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"City University of Hong Kong","institution_ids":["https://openalex.org/I168719708"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087460479","display_name":"Ju Jia","orcid":"https://orcid.org/0000-0003-1228-3274"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ju Jia","raw_affiliation_strings":["Southeast University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southeast University","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013213053","display_name":"Lanting Fang","orcid":"https://orcid.org/0000-0002-1374-395X"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lanting Fang","raw_affiliation_strings":["Beijing Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing Institute of Technology","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101405789","display_name":"Liu Jian","orcid":"https://orcid.org/0000-0001-9665-6466"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jian Liu","raw_affiliation_strings":["Ant Group"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ant Group","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.24166658,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3684","last_page":"3693"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10320","display_name":"Neural Networks and Applications","score":0.9143999814987183,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10320","display_name":"Neural Networks and Applications","score":0.9143999814987183,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9336000084877014},{"id":"https://openalex.org/keywords/discriminative-model","display_name":"Discriminative model","score":0.6371999979019165},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6306999921798706},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.4810999929904938},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.4415999948978424},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.44020000100135803},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.40959998965263367}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9336000084877014},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6446999907493591},{"id":"https://openalex.org/C97931131","wikidata":"https://www.wikidata.org/wiki/Q5282087","display_name":"Discriminative model","level":2,"score":0.6371999979019165},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6306999921798706},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6115999817848206},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.4810999929904938},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.4415999948978424},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.44020000100135803},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.40959998965263367},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.36399999260902405},{"id":"https://openalex.org/C2781238097","wikidata":"https://www.wikidata.org/wiki/Q175026","display_name":"Object (grammar)","level":2,"score":0.3061000108718872},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3052999973297119},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.3012999892234802},{"id":"https://openalex.org/C2986577269","wikidata":"https://www.wikidata.org/wiki/Q11306265","display_name":"Random noise","level":2,"score":0.2992999851703644},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.28690001368522644},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.28209999203681946},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.267300009727478},{"id":"https://openalex.org/C1893757","wikidata":"https://www.wikidata.org/wiki/Q3653001","display_name":"Inversion (geology)","level":3,"score":0.2614000141620636},{"id":"https://openalex.org/C2780586882","wikidata":"https://www.wikidata.org/wiki/Q7520643","display_name":"Simple (philosophy)","level":2,"score":0.2612999975681305},{"id":"https://openalex.org/C137836250","wikidata":"https://www.wikidata.org/wiki/Q984063","display_name":"Optimization problem","level":2,"score":0.25589999556541443},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.2533999979496002}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/iccv51701.2025.00351","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccv51701.2025.00351","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/CVF International Conference on Computer Vision (ICCV)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2508.14015","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2508.14015","pdf_url":"https://arxiv.org/pdf/2508.14015","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2508.14015","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2508.14015","pdf_url":"https://arxiv.org/pdf/2508.14015","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3070022028","display_name":null,"funder_award_id":"62172090","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6986730364","display_name":null,"funder_award_id":"RF1028623097","funder_id":"https://openalex.org/F4320324856","funder_display_name":"Southeast University"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320324856","display_name":"Southeast University","ror":"https://ror.org/04ct4d772"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4415014307.pdf","grobid_xml":"https://content.openalex.org/works/W4415014307.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Self-supervised":[0],"contrastive":[1,119],"learning":[2],"(CL)":[3],"effectively":[4,107],"learns":[5],"transferable":[6],"representations":[7],"from":[8],"unlabeled":[9],"data":[10,20],"containing":[11],"images":[12,30],"or":[13],"image-text":[14],"pairs":[15],"but":[16],"suffers":[17],"vulnerability":[18],"to":[19,38,52,149],"poisoning":[21],"backdoor":[22,60,163],"attacks":[23],"(DPCLs).":[24],"An":[25],"adversary":[26],"can":[27,166],"inject":[28],"poisoned":[29,87],"into":[31,108],"pretraining":[32],"datasets,":[33],"causing":[34],"compromised":[35],"CL":[36,93],"encoders":[37],"exhibit":[39],"targeted":[40],"misbehavior":[41],"in":[42,70,86],"downstream":[43],"tasks.":[44],"Existing":[45],"DPCLs,":[46,151],"however,":[47],"achieve":[48],"limited":[49],"efficacy":[50],"due":[51],"their":[53],"dependence":[54],"on":[55],"fragile":[56],"implicit":[57],"co-occurrence":[58],"between":[59],"and":[61,64,97],"target":[62],"object":[63],"inadequate":[65],"suppression":[66],"of":[67,102],"discriminative":[68],"features":[69],"backdoored":[71],"images.":[72,88],"We":[73],"propose":[74],"Noisy":[75,157],"Alignment":[76,158],"(NA),":[77],"a":[78],"DPCL":[79],"method":[80,112,140],"that":[81],"explicitly":[82],"suppresses":[83],"noise":[84],"components":[85],"Inspired":[89],"by":[90,116],"powerful":[91],"training-controllable":[92],"attacks,":[94],"we":[95],"identify":[96],"extract":[98],"the":[99],"critical":[100],"objective":[101],"noisy":[103,114],"alignment,":[104],"adapting":[105],"it":[106],"data-poisoning":[109],"scenarios.":[110],"Our":[111],"implements":[113],"alignment":[115],"strategically":[117],"manipulating":[118],"learning's":[120],"random":[121],"cropping":[122],"mechanism,":[123],"formulating":[124],"this":[125],"process":[126],"as":[127],"an":[128],"image":[129],"layout":[130],"optimization":[131],"problem":[132],"with":[133],"theoretically":[134],"derived":[135],"optimal":[136],"parameters.":[137],"The":[138],"resulting":[139],"is":[141],"simple":[142],"yet":[143],"effective,":[144],"achieving":[145],"state-of-the-art":[146],"performance":[147],"compared":[148],"existing":[150],"while":[152],"maintaining":[153],"clean-data":[154],"accuracy.":[155],"Furthermore,":[156],"demonstrates":[159],"robustness":[160],"against":[161],"common":[162],"defenses.":[164],"Codes":[165],"be":[167],"found":[168],"at":[169],"https://github.com/jsrdcht/Noisy-Alignment.":[170]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}