{"id":"https://openalex.org/W4415067457","doi":"https://doi.org/10.1109/iccv51701.2025.01773","title":"BadVideo: Stealthy Backdoor Attack Against Text-to-Video Generation","display_name":"BadVideo: Stealthy Backdoor Attack Against Text-to-Video Generation","publication_year":2025,"publication_date":"2025-10-19","ids":{"openalex":"https://openalex.org/W4415067457","doi":"https://doi.org/10.1109/iccv51701.2025.01773"},"language":"en","primary_location":{"id":"doi:10.1109/iccv51701.2025.01773","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccv51701.2025.01773","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/CVF International Conference on Computer Vision (ICCV)","raw_type":"proceedings-article"},"type":"article","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2504.16907","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5014621529","display_name":"Ruotong Wang","orcid":"https://orcid.org/0000-0001-9758-7458"},"institutions":[{"id":"https://openalex.org/I4210116924","display_name":"Chinese University of Hong Kong, Shenzhen","ror":"https://ror.org/02d5ks197","country_code":"CN","type":"education","lineage":["https://openalex.org/I177725633","https://openalex.org/I180726961","https://openalex.org/I4210116924"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruotong Wang","raw_affiliation_strings":["The Chinese University of Hong Kong,Shenzhen"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Chinese University of Hong Kong,Shenzhen","institution_ids":["https://openalex.org/I4210116924"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120017279","display_name":"Mingli Zhu","orcid":"https://orcid.org/0000-0002-6412-1755"},"institutions":[{"id":"https://openalex.org/I4210116924","display_name":"Chinese University of Hong Kong, Shenzhen","ror":"https://ror.org/02d5ks197","country_code":"CN","type":"education","lineage":["https://openalex.org/I177725633","https://openalex.org/I180726961","https://openalex.org/I4210116924"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingli Zhu","raw_affiliation_strings":["The Chinese University of Hong Kong,Shenzhen"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Chinese University of Hong Kong,Shenzhen","institution_ids":["https://openalex.org/I4210116924"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087564348","display_name":"Jiarong Ou","orcid":null},"institutions":[{"id":"https://openalex.org/I124391630","display_name":"Arab Open University","ror":"https://ror.org/04dqhen73","country_code":"OM","type":"education","lineage":["https://openalex.org/I124391630","https://openalex.org/I4210093932"]}],"countries":["OM"],"is_corresponding":false,"raw_author_name":"Jiarong Ou","raw_affiliation_strings":["Kling Team, Kuaishou Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kling Team, Kuaishou Technology","institution_ids":["https://openalex.org/I124391630"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032361483","display_name":"Rui Chen","orcid":"https://orcid.org/0000-0002-7662-7761"},"institutions":[{"id":"https://openalex.org/I124391630","display_name":"Arab Open University","ror":"https://ror.org/04dqhen73","country_code":"OM","type":"education","lineage":["https://openalex.org/I124391630","https://openalex.org/I4210093932"]}],"countries":["OM"],"is_corresponding":false,"raw_author_name":"Rui Chen","raw_affiliation_strings":["Kling Team, Kuaishou Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kling Team, Kuaishou Technology","institution_ids":["https://openalex.org/I124391630"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100624769","display_name":"Xin Tao","orcid":"https://orcid.org/0000-0002-5107-9068"},"institutions":[{"id":"https://openalex.org/I124391630","display_name":"Arab Open University","ror":"https://ror.org/04dqhen73","country_code":"OM","type":"education","lineage":["https://openalex.org/I124391630","https://openalex.org/I4210093932"]}],"countries":["OM"],"is_corresponding":false,"raw_author_name":"Xin Tao","raw_affiliation_strings":["Kling Team, Kuaishou Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kling Team, Kuaishou Technology","institution_ids":["https://openalex.org/I124391630"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101928510","display_name":"Pengfei Wan","orcid":"https://orcid.org/0000-0001-7225-565X"},"institutions":[{"id":"https://openalex.org/I124391630","display_name":"Arab Open University","ror":"https://ror.org/04dqhen73","country_code":"OM","type":"education","lineage":["https://openalex.org/I124391630","https://openalex.org/I4210093932"]}],"countries":["OM"],"is_corresponding":false,"raw_author_name":"Pengfei Wan","raw_affiliation_strings":["Kling Team, Kuaishou Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kling Team, Kuaishou Technology","institution_ids":["https://openalex.org/I124391630"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5068027800","display_name":"Baoyuan Wu","orcid":"https://orcid.org/0000-0003-2183-5990"},"institutions":[{"id":"https://openalex.org/I4210116924","display_name":"Chinese University of Hong Kong, Shenzhen","ror":"https://ror.org/02d5ks197","country_code":"CN","type":"education","lineage":["https://openalex.org/I177725633","https://openalex.org/I180726961","https://openalex.org/I4210116924"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Baoyuan Wu","raw_affiliation_strings":["The Chinese University of Hong Kong,Shenzhen"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Chinese University of Hong Kong,Shenzhen","institution_ids":["https://openalex.org/I4210116924"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.30576466,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"19075","last_page":"19084"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9894999861717224,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9894999861717224,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9688000082969666},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7143999934196472},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5943999886512756},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5087000131607056},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.4763000011444092},{"id":"https://openalex.org/keywords/dimension","display_name":"Dimension (graph theory)","score":0.46320000290870667},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.40700000524520874}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9688000082969666},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7717999815940857},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7143999934196472},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5943999886512756},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5781000256538391},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5087000131607056},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.4763000011444092},{"id":"https://openalex.org/C33676613","wikidata":"https://www.wikidata.org/wiki/Q13415176","display_name":"Dimension (graph theory)","level":2,"score":0.46320000290870667},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.40700000524520874},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.2957000136375427},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.29010000824928284},{"id":"https://openalex.org/C2779797433","wikidata":"https://www.wikidata.org/wiki/Q632959","display_name":"Blacklisting","level":2,"score":0.2800000011920929},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2797999978065491},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2721000015735626},{"id":"https://openalex.org/C139458680","wikidata":"https://www.wikidata.org/wiki/Q12184942","display_name":"Interoperation","level":3,"score":0.2623000144958496},{"id":"https://openalex.org/C66746571","wikidata":"https://www.wikidata.org/wiki/Q1134833","display_name":"ENCODE","level":3,"score":0.2621000111103058},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.25440001487731934},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.25099998712539673}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/iccv51701.2025.01773","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccv51701.2025.01773","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/CVF International Conference on Computer Vision (ICCV)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2504.16907","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2504.16907","pdf_url":"https://arxiv.org/pdf/2504.16907","source":{"id":"https://openalex.org/S4393918464","display_name":"ArXiv.org","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2504.16907","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2504.16907","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2504.16907","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2504.16907","pdf_url":"https://arxiv.org/pdf/2504.16907","source":{"id":"https://openalex.org/S4393918464","display_name":"ArXiv.org","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4415067457.pdf","grobid_xml":"https://content.openalex.org/works/W4415067457.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Text-to-video":[0],"(T2V)":[1],"generative":[2],"models":[3,24],"have":[4],"rapidly":[5],"advanced":[6],"and":[7,16,56,181,203],"found":[8],"widespread":[9],"applications":[10],"across":[11],"fields":[12],"like":[13],"entertainment,":[14],"education,":[15],"marketing.":[17],"However,":[18],"the":[19,35,47,76,129,136,146,192],"adversarial":[20,91,193],"vulnerabilities":[21],"of":[22,149,195],"these":[23,127],"remain":[25],"rarely":[26],"explored.":[27],"We":[28],"observe":[29],"that":[30,159,170],"in":[31,46,116],"T2V":[32,83,196],"generation":[33],"tasks,":[34],"generated":[36],"videos":[37],"often":[38],"contain":[39],"substantial":[40],"redundant":[41,117],"information":[42,163],"not":[43],"explicitly":[44],"specified":[45],"text":[48],"prompts,":[49],"such":[50],"as":[51],"environmental":[52],"elements,":[53],"secondary":[54],"objects,":[55],"additional":[57],"details,":[58],"providing":[59,140],"opportunities":[60],"for":[61,82],"malicious":[62,107,123,131],"attackers":[63],"to":[64,105,121,200],"embed":[65],"hidden":[66],"harmful":[67],"content.":[68],"Exploiting":[69],"this":[70],"inherent":[71],"redundancy,":[72],"we":[73],"introduce":[74],"BadVideo,":[75],"first":[77],"backdoor":[78],"attack":[79,86,152,174],"framework":[80],"tailored":[81],"generation.":[84],"Our":[85,205],"focuses":[87],"on":[88,126,185],"designing":[89],"target":[90,132],"outputs":[92],"through":[93],"two":[94],"key":[95],"strategies:":[96],"(1)":[97],"Spatio-Temporal":[98],"Composition,":[99],"which":[100,113],"combines":[101],"different":[102],"spatiotemporal":[103],"features":[104],"encode":[106],"information;":[108],"(2)":[109],"Dynamic":[110],"Element":[111],"Transformation,":[112],"introduces":[114],"transformations":[115],"elements":[118],"over":[119],"time":[120],"convey":[122],"information.":[124],"Based":[125],"strategies,":[128],"attacker's":[130],"seamlessly":[133],"integrates":[134],"with":[135],"user's":[137],"textual":[138],"instructions,":[139],"high":[141,173],"stealthiness.":[142],"Moreover,":[143],"by":[144],"exploiting":[145],"temporal":[147],"dimension":[148],"videos,":[150],"our":[151,189],"successfully":[153],"evades":[154],"traditional":[155],"content":[156],"moderation":[157],"systems":[158],"primarily":[160],"analyze":[161],"spatial":[162],"within":[164],"individual":[165],"frames.":[166],"Extensive":[167],"experiments":[168],"demonstrate":[169],"BadVideo":[171],"achieves":[172],"success":[175],"rates":[176],"while":[177],"preserving":[178],"original":[179],"semantics":[180],"maintaining":[182],"excellent":[183],"performance":[184],"clean":[186],"inputs.":[187],"Overall,":[188],"work":[190],"reveals":[191],"vulnerability":[194],"models,":[197],"calling":[198],"attention":[199],"potential":[201],"risks":[202],"misuse.":[204],"project":[206],"page":[207],"is":[208],"at":[209],"https://wrt2000.github.io/BadVideo2025/.":[210]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-11T00:00:00"}