{"id":"https://openalex.org/W4386598431","doi":"https://doi.org/10.1109/icip49359.2023.10222807","title":"Efficient any-Target Backdoor Attack with Pseudo Poisoned Samples","display_name":"Efficient any-Target Backdoor Attack with Pseudo Poisoned Samples","publication_year":2023,"publication_date":"2023-09-11","ids":{"openalex":"https://openalex.org/W4386598431","doi":"https://doi.org/10.1109/icip49359.2023.10222807"},"language":"en","primary_location":{"id":"doi:10.1109/icip49359.2023.10222807","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/icip49359.2023.10222807","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE International Conference on Image Processing (ICIP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102992183","display_name":"Bin Huang","orcid":"https://orcid.org/0000-0002-5043-1445"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bin Huang","raw_affiliation_strings":["Tsinghua University,Tsinghua Shenzhen International Graduate School,Shenzhen,China","Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Tsinghua Shenzhen International Graduate School,Shenzhen,China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]},{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100376399","display_name":"Zhi Wang","orcid":"https://orcid.org/0000-0002-5462-6178"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhi Wang","raw_affiliation_strings":["Tsinghua University,Tsinghua Shenzhen International Graduate School,Shenzhen,China","Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Tsinghua Shenzhen International Graduate School,Shenzhen,China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]},{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"33","issue":null,"first_page":"3319","last_page":"3323"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.989300012588501,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9850000143051147,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9982945919036865},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7305809259414673},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5606102347373962},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.5466840267181396},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4528551399707794},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.44093844294548035},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.4098277688026428},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.36718297004699707}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9982945919036865},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7305809259414673},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5606102347373962},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5466840267181396},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4528551399707794},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.44093844294548035},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.4098277688026428},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.36718297004699707}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icip49359.2023.10222807","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/icip49359.2023.10222807","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE International Conference on Image Processing (ICIP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W2753783305","https://openalex.org/W2774423163","https://openalex.org/W2807363941","https://openalex.org/W2883233582","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W2990270730","https://openalex.org/W2996800219","https://openalex.org/W3010216907","https://openalex.org/W3034856584","https://openalex.org/W3083185154","https://openalex.org/W3093239278","https://openalex.org/W3115279145","https://openalex.org/W3166022359","https://openalex.org/W3191777533","https://openalex.org/W4214564822","https://openalex.org/W4214680449","https://openalex.org/W4224924081","https://openalex.org/W4285605767","https://openalex.org/W4287998266","https://openalex.org/W4298140072","https://openalex.org/W6746897123","https://openalex.org/W6750462152","https://openalex.org/W6770897281","https://openalex.org/W6784558051"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4386080799","https://openalex.org/W3140988292","https://openalex.org/W4317672133","https://openalex.org/W4281570223"],"abstract_inverted_index":{"Deep":[0],"neural":[1],"networks":[2],"present":[3],"their":[4],"potential":[5],"vulnerabilities":[6],"to":[7,50,105,130],"backdoor":[8,32,35,111],"attacks.":[9],"They":[10],"have":[11],"a":[12,60],"satisfactory":[13],"performance":[14],"for":[15],"benign":[16],"users":[17],"with":[18,30,70,83],"clean":[19],"samples":[20,101],"but":[21],"will":[22],"get":[23],"malicious":[24],"outputs":[25],"when":[26],"inputs":[27],"are":[28,102],"attached":[29],"the":[31,67,71,80,84,90,94,107],"trigger.":[33],"Current":[34],"attacks":[36],"on":[37,124],"image":[38,85],"classifiers":[39],"usually":[40],"target":[41],"only":[42],"one":[43],"single":[44],"class,":[45],"making":[46],"them":[47],"not":[48],"robust":[49,129],"defenses":[51],"against":[52],"this":[53,56],"characteristic.":[54],"In":[55],"work,":[57],"we":[58,78],"propose":[59],"new":[61],"any-target":[62],"attack":[63],"that":[64,116],"targets":[65],"all":[66],"labels":[68],"simultaneously":[69],"triggers":[72],"being":[73],"invisible":[74],"and":[75,122,127],"input-dependent.":[76],"Specifically,":[77],"train":[79],"classifier":[81],"together":[82],"steganography":[86],"model":[87],"by":[88],"encoding":[89],"one-hot":[91],"encodings":[92],"into":[93],"input":[95],"images.":[96],"The":[97],"novel":[98],"pseudo":[99],"poisoned":[100],"then":[103],"introduced":[104],"improve":[106],"effectiveness":[108],"of":[109],"our":[110,117],"attack.":[112],"Experimental":[113],"results":[114],"show":[115],"method":[118],"is":[119,128],"both":[120],"effective":[121],"efficient":[123],"several":[125],"datasets":[126],"existing":[131],"defenses.":[132]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}