{"id":"https://openalex.org/W3155871095","doi":"https://doi.org/10.1109/infocom42981.2021.9488902","title":"Invisible Poison: A Blackbox Clean Label Backdoor Attack to Deep Neural Networks","display_name":"Invisible Poison: A Blackbox Clean Label Backdoor Attack to Deep Neural Networks","publication_year":2021,"publication_date":"2021-05-10","ids":{"openalex":"https://openalex.org/W3155871095","doi":"https://doi.org/10.1109/infocom42981.2021.9488902","mag":"3155871095"},"language":"en","primary_location":{"id":"doi:10.1109/infocom42981.2021.9488902","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infocom42981.2021.9488902","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE INFOCOM 2021 - IEEE Conference on Computer Communications","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5061056153","display_name":"Rui Ning","orcid":"https://orcid.org/0000-0003-4050-6252"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rui Ning","raw_affiliation_strings":["School of Cybersecurity"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cybersecurity","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100392353","display_name":"Li Jiang","orcid":"https://orcid.org/0000-0001-7058-6957"},"institutions":[{"id":"https://openalex.org/I81365321","display_name":"Old Dominion University","ror":"https://ror.org/04zjtrb98","country_code":"US","type":"education","lineage":["https://openalex.org/I81365321"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jiang Li","raw_affiliation_strings":["Old Dominion University, Norfolk, VA, USA","Old Dominion University,Department of Electrical and Computer Engineering,Norfolk,VA,USA,23529"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Old Dominion University, Norfolk, VA, USA","institution_ids":["https://openalex.org/I81365321"]},{"raw_affiliation_string":"Old Dominion University,Department of Electrical and Computer Engineering,Norfolk,VA,USA,23529","institution_ids":["https://openalex.org/I81365321"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074327315","display_name":"Chunsheng Xin","orcid":"https://orcid.org/0000-0001-5575-2849"},"institutions":[{"id":"https://openalex.org/I81365321","display_name":"Old Dominion University","ror":"https://ror.org/04zjtrb98","country_code":"US","type":"education","lineage":["https://openalex.org/I81365321"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chunsheng Xin","raw_affiliation_strings":["Old Dominion University, Norfolk, VA, USA","School of Cybersecurity","Old Dominion University,Department of Electrical and Computer Engineering,Norfolk,VA,USA,23529"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Old Dominion University, Norfolk, VA, USA","institution_ids":["https://openalex.org/I81365321"]},{"raw_affiliation_string":"School of Cybersecurity","institution_ids":[]},{"raw_affiliation_string":"Old Dominion University,Department of Electrical and Computer Engineering,Norfolk,VA,USA,23529","institution_ids":["https://openalex.org/I81365321"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5061078522","display_name":"Hongyi Wu","orcid":"https://orcid.org/0000-0001-8596-1342"},"institutions":[{"id":"https://openalex.org/I81365321","display_name":"Old Dominion University","ror":"https://ror.org/04zjtrb98","country_code":"US","type":"education","lineage":["https://openalex.org/I81365321"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hongyi Wu","raw_affiliation_strings":["Old Dominion University, Norfolk, VA, USA","School of Cybersecurity","Old Dominion University, Norfolk, VA, USA; School of Cybersecurity"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Old Dominion University, Norfolk, VA, USA","institution_ids":["https://openalex.org/I81365321"]},{"raw_affiliation_string":"School of Cybersecurity","institution_ids":[]},{"raw_affiliation_string":"Old Dominion University, Norfolk, VA, USA; School of Cybersecurity","institution_ids":["https://openalex.org/I81365321"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":53,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9933000206947327,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9894000291824341,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9951552748680115},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6976161599159241},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5218740701675415},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5001308917999268},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.49282482266426086},{"id":"https://openalex.org/keywords/mnist-database","display_name":"MNIST database","score":0.4638768434524536},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3889273703098297}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9951552748680115},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6976161599159241},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5218740701675415},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5001308917999268},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.49282482266426086},{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.4638768434524536},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3889273703098297}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/infocom42981.2021.9488902","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infocom42981.2021.9488902","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE INFOCOM 2021 - IEEE Conference on Computer Communications","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":53,"referenced_works":["https://openalex.org/W1686810756","https://openalex.org/W1836465849","https://openalex.org/W1849277567","https://openalex.org/W2067713319","https://openalex.org/W2096733369","https://openalex.org/W2097117768","https://openalex.org/W2108598243","https://openalex.org/W2123045220","https://openalex.org/W2187089797","https://openalex.org/W2193413348","https://openalex.org/W2194775991","https://openalex.org/W2479866714","https://openalex.org/W2662765459","https://openalex.org/W2740520864","https://openalex.org/W2774423163","https://openalex.org/W2783741806","https://openalex.org/W2883233582","https://openalex.org/W2899771611","https://openalex.org/W2916360674","https://openalex.org/W2919762867","https://openalex.org/W2946450731","https://openalex.org/W2955425717","https://openalex.org/W2963073614","https://openalex.org/W2963382180","https://openalex.org/W2963446712","https://openalex.org/W2963516518","https://openalex.org/W2970335439","https://openalex.org/W2970971581","https://openalex.org/W2972120770","https://openalex.org/W2996800219","https://openalex.org/W3012113073","https://openalex.org/W3046544594","https://openalex.org/W3047014424","https://openalex.org/W3099206234","https://openalex.org/W3118608800","https://openalex.org/W4295312788","https://openalex.org/W6637373629","https://openalex.org/W6638667902","https://openalex.org/W6639204139","https://openalex.org/W6677995690","https://openalex.org/W6687566353","https://openalex.org/W6725739302","https://openalex.org/W6729966448","https://openalex.org/W6746897123","https://openalex.org/W6756040250","https://openalex.org/W6759622168","https://openalex.org/W6762718338","https://openalex.org/W6762806116","https://openalex.org/W6766978945","https://openalex.org/W6767346468","https://openalex.org/W6768126957","https://openalex.org/W6779669310","https://openalex.org/W6787972765"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W3093748630","https://openalex.org/W3206218040","https://openalex.org/W4206776436","https://openalex.org/W4401407399"],"abstract_inverted_index":{"This":[0],"paper":[1],"reports":[2],"a":[3,18,25,29,47,75,138],"new":[4],"clean-label":[5],"data":[6,60,143,149,173],"poisoning":[7,61],"backdoor":[8,19,48,62,132],"attack,":[9,77],"named":[10],"Invisible":[11],"Poison,":[12],"which":[13],"stealthily":[14],"and":[15,100,129,144,166,179,185],"aggressively":[16],"plants":[17],"in":[20,116],"neural":[21],"networks.":[22],"It":[23],"converts":[24],"regular":[26],"trigger":[27,31,95,113],"to":[28,45,90,120,147,192],"noised":[30,112],"that":[32,49],"can":[33,50,102,133],"be":[34,51,134],"easily":[35,103],"concealed":[36],"inside":[37],"images":[38],"for":[39],"training":[40,122],"NN,":[41],"with":[42,58,137],"the":[43,55,68,81,94,108,117,125,194],"objective":[44],"plant":[46],"later":[52],"activated":[53],"by":[54],"trigger.":[56],"Compared":[57],"existing":[59],"attacks,":[63],"this":[64,85,111],"newfound":[65],"attack":[66,86,126,155],"has":[67],"following":[69],"distinct":[70],"properties.":[71],"First,":[72],"it":[73],"is":[74,96,127,145,156],"blackbox":[76],"requiring":[78],"zero-knowledge":[79],"of":[80,141],"target":[82],"model.":[83],"Second,":[84],"utilizes":[87],"\"invisible":[88],"poison\"":[89],"achieve":[91],"stealthiness":[92],"where":[93],"disguised":[97],"as":[98,168,170,176],"`noise',":[99],"thus":[101],"evade":[104],"human":[105],"inspection.":[106],"On":[107],"other":[109],"hand,":[110],"remains":[114],"effective":[115],"feature":[118],"space":[119],"poison":[121],"data.":[123],"Third,":[124],"practical":[128],"aggressive.":[130],"A":[131],"effectively":[135],"planted":[136],"small":[139],"amount":[140],"poisoned":[142],"robust":[146],"most":[148],"augmentation":[150],"methods":[151],"during":[152],"training.":[153],"The":[154],"fully":[157],"tested":[158],"on":[159],"multiple":[160],"benchmark":[161],"datasets":[162],"including":[163],"MNIST,":[164],"Cifar10,":[165],"ImageNet10,":[167],"well":[169],"application":[171],"specific":[172],"sets":[174],"such":[175],"Yahoo":[177],"Adblocker":[178],"GTSRB.":[180],"Two":[181],"countermeasures,":[182],"namely":[183],"Supervised":[184],"Unsupervised":[186],"Poison":[187],"Sample":[188],"Detection,":[189],"are":[190],"introduced":[191],"defend":[193],"attack.":[195]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":18},{"year":2024,"cited_by_count":22},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":4}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}