{"id":"https://openalex.org/W4416148839","doi":"https://doi.org/10.1109/jiot.2025.3631907","title":"FlipBAT: Toward Stealthy Endogenous Backdoor Attacks on Traffic Sign Recognition via Self-Flipping","display_name":"FlipBAT: Toward Stealthy Endogenous Backdoor Attacks on Traffic Sign Recognition via Self-Flipping","publication_year":2025,"publication_date":"2025-11-12","ids":{"openalex":"https://openalex.org/W4416148839","doi":"https://doi.org/10.1109/jiot.2025.3631907"},"language":null,"primary_location":{"id":"doi:10.1109/jiot.2025.3631907","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2025.3631907","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5074589029","display_name":"Yalun Wu","orcid":"https://orcid.org/0000-0002-0891-1904"},"institutions":[{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]},{"id":"https://openalex.org/I4210142167","display_name":"DigitalSpace (United States)","ror":"https://ror.org/04h1th525","country_code":"US","type":"company","lineage":["https://openalex.org/I4210142167"]}],"countries":["CN","US"],"is_corresponding":false,"raw_author_name":"Yalun Wu","raw_affiliation_strings":["School of Cyberspace Science and Technology, Beijing, China","School of Cyberspace Science and Technology, Beijing Jiaotong University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-0891-1904","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing, China","institution_ids":["https://openalex.org/I4210142167"]},{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Jiaotong University, Beijing, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111270853","display_name":"Xiaoshu Cui","orcid":"https://orcid.org/0009-0001-1693-2473"},"institutions":[{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]},{"id":"https://openalex.org/I4210142167","display_name":"DigitalSpace (United States)","ror":"https://ror.org/04h1th525","country_code":"US","type":"company","lineage":["https://openalex.org/I4210142167"]}],"countries":["CN","US"],"is_corresponding":false,"raw_author_name":"Xiaoshu Cui","raw_affiliation_strings":["School of Cyberspace Science and Technology, Beijing, China","School of Cyberspace Science and Technology, Beijing Jiaotong University, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0001-1693-2473","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing, China","institution_ids":["https://openalex.org/I4210142167"]},{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Jiaotong University, Beijing, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049446052","display_name":"Yingxiao Xiang","orcid":"https://orcid.org/0000-0002-8679-7000"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yingxiao Xiang","raw_affiliation_strings":["Chinese Academy of Sciences, Institute of Information Engineering, Beijing, China","Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-8679-7000","affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences, Institute of Information Engineering, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054643672","display_name":"Yingying Yao","orcid":"https://orcid.org/0000-0003-2553-9259"},"institutions":[{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]},{"id":"https://openalex.org/I4210142167","display_name":"DigitalSpace (United States)","ror":"https://ror.org/04h1th525","country_code":"US","type":"company","lineage":["https://openalex.org/I4210142167"]}],"countries":["CN","US"],"is_corresponding":false,"raw_author_name":"Yingying Yao","raw_affiliation_strings":["School of Cyberspace Science and Technology, Beijing, China","School of Cyberspace Science and Technology, Beijing Jiaotong University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-2553-9259","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing, China","institution_ids":["https://openalex.org/I4210142167"]},{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Jiaotong University, Beijing, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033817796","display_name":"Yuanwan Chen","orcid":"https://orcid.org/0009-0008-5036-0035"},"institutions":[{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]},{"id":"https://openalex.org/I4210142167","display_name":"DigitalSpace (United States)","ror":"https://ror.org/04h1th525","country_code":"US","type":"company","lineage":["https://openalex.org/I4210142167"]}],"countries":["CN","US"],"is_corresponding":false,"raw_author_name":"Yuanwan Chen","raw_affiliation_strings":["School of Cyberspace Science and Technology, Beijing, China","School of Cyberspace Science and Technology, Beijing Jiaotong University, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0008-5036-0035","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing, China","institution_ids":["https://openalex.org/I4210142167"]},{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Jiaotong University, Beijing, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059369429","display_name":"Zhen Han","orcid":"https://orcid.org/0000-0002-3688-873X"},"institutions":[{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]},{"id":"https://openalex.org/I4210142167","display_name":"DigitalSpace (United States)","ror":"https://ror.org/04h1th525","country_code":"US","type":"company","lineage":["https://openalex.org/I4210142167"]}],"countries":["CN","US"],"is_corresponding":false,"raw_author_name":"Zhen Han","raw_affiliation_strings":["School of Cyberspace Science and Technology, Beijing, China","School of Cyberspace Science and Technology, Beijing Jiaotong University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-3688-873X","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing, China","institution_ids":["https://openalex.org/I4210142167"]},{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Jiaotong University, Beijing, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070828650","display_name":"Jiqiang Liu","orcid":"https://orcid.org/0000-0003-1147-4327"},"institutions":[{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]},{"id":"https://openalex.org/I4210142167","display_name":"DigitalSpace (United States)","ror":"https://ror.org/04h1th525","country_code":"US","type":"company","lineage":["https://openalex.org/I4210142167"]}],"countries":["CN","US"],"is_corresponding":false,"raw_author_name":"Jiqiang Liu","raw_affiliation_strings":["School of Cyberspace Science and Technology, Beijing, China","School of Cyberspace Science and Technology, Beijing Jiaotong University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-1147-4327","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing, China","institution_ids":["https://openalex.org/I4210142167"]},{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Jiaotong University, Beijing, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047248381","display_name":"Wenjia Niu","orcid":"https://orcid.org/0000-0003-4706-4266"},"institutions":[{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]},{"id":"https://openalex.org/I4210142167","display_name":"DigitalSpace (United States)","ror":"https://ror.org/04h1th525","country_code":"US","type":"company","lineage":["https://openalex.org/I4210142167"]}],"countries":["CN","US"],"is_corresponding":false,"raw_author_name":"Wenjia Niu","raw_affiliation_strings":["School of Cyberspace Science and Technology, Beijing, China","School of Cyberspace Science and Technology, Beijing Jiaotong University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-4706-4266","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing, China","institution_ids":["https://openalex.org/I4210142167"]},{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Jiaotong University, Beijing, China","institution_ids":["https://openalex.org/I21193070"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.12470537,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"13","issue":"2","first_page":"3094","last_page":"3105"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9506999850273132,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9506999850273132,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.014600000344216824,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11775","display_name":"COVID-19 diagnosis using AI","score":0.0038999998942017555,"subfield":{"id":"https://openalex.org/subfields/2741","display_name":"Radiology, Nuclear Medicine and Imaging"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9990000128746033},{"id":"https://openalex.org/keywords/sign","display_name":"Sign (mathematics)","score":0.42089998722076416},{"id":"https://openalex.org/keywords/jamming","display_name":"Jamming","score":0.28630000352859497},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.2410999983549118}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9990000128746033},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.675000011920929},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4918999969959259},{"id":"https://openalex.org/C139676723","wikidata":"https://www.wikidata.org/wiki/Q1193832","display_name":"Sign (mathematics)","level":2,"score":0.42089998722076416},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2976999878883362},{"id":"https://openalex.org/C2779079576","wikidata":"https://www.wikidata.org/wiki/Q17092823","display_name":"Jamming","level":2,"score":0.28630000352859497},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2410999983549118},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2281000018119812},{"id":"https://openalex.org/C2983860417","wikidata":"https://www.wikidata.org/wiki/Q170285","display_name":"Traffic sign","level":3,"score":0.21160000562667847},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.20110000669956207}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/jiot.2025.3631907","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2025.3631907","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1100003544","display_name":null,"funder_award_id":"62372021","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2247602126","display_name":null,"funder_award_id":"2023JBZY036","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G2727007973","display_name":null,"funder_award_id":"2024YJS048","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G4667011574","display_name":null,"funder_award_id":"202407090180","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G890217249","display_name":null,"funder_award_id":"202407090180","funder_id":"https://openalex.org/F4320322725","funder_display_name":"China Scholarship Council"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322725","display_name":"China Scholarship Council","ror":"https://ror.org/04atp4p48"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":49,"referenced_works":["https://openalex.org/W1977610018","https://openalex.org/W2117876524","https://openalex.org/W2194775991","https://openalex.org/W2337099467","https://openalex.org/W2807363941","https://openalex.org/W2883780447","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W2953644201","https://openalex.org/W2963163009","https://openalex.org/W2963516603","https://openalex.org/W2970335439","https://openalex.org/W2990270730","https://openalex.org/W3042368254","https://openalex.org/W3101584909","https://openalex.org/W3111897001","https://openalex.org/W3162665729","https://openalex.org/W3174032462","https://openalex.org/W3174887918","https://openalex.org/W3203057282","https://openalex.org/W4210667216","https://openalex.org/W4226290276","https://openalex.org/W4229369079","https://openalex.org/W4291184140","https://openalex.org/W4292672153","https://openalex.org/W4307964213","https://openalex.org/W4312329299","https://openalex.org/W4312569687","https://openalex.org/W4317796293","https://openalex.org/W4372266914","https://openalex.org/W4377000479","https://openalex.org/W4378697027","https://openalex.org/W4386083011","https://openalex.org/W4386472916","https://openalex.org/W4390871881","https://openalex.org/W4390871934","https://openalex.org/W4392843850","https://openalex.org/W4393156382","https://openalex.org/W4393158822","https://openalex.org/W4393185145","https://openalex.org/W4401038847","https://openalex.org/W4402727117","https://openalex.org/W4402776103","https://openalex.org/W4403540729","https://openalex.org/W4403791992","https://openalex.org/W4404815152","https://openalex.org/W4405399838","https://openalex.org/W4407948749","https://openalex.org/W4415797914"],"related_works":[],"abstract_inverted_index":{"Recent":[0],"studies":[1],"show":[2],"that":[3,45,72,99,112,141],"deep":[4],"learning-based":[5],"traffic":[6,23,128],"sign":[7,129],"recognition":[8,130],"systems":[9],"are":[10],"vulnerable":[11],"to":[12,21,27,49,166,175],"backdoor":[13,29,51,69,97,110,148,158,180],"attacks.":[14],"These":[15],"compromised":[16],"models":[17,139],"can":[18],"be":[19,176],"activated":[20],"misclassify":[22],"signs":[24],"when":[25],"exposed":[26],"specific":[28],"patterns":[30,52],"during":[31],"inference.":[32],"Nevertheless,":[33],"existing":[34],"attack":[35,58,70,89,93,98,111],"methods":[36],"rely":[37],"on":[38,125],"exogenous":[39],"triggers":[40],"(e.g.,":[41],"stickers":[42],"or":[43],"patches)":[44],"introduce":[46],"external":[47,85],"features":[48],"associate":[50],"with":[53,160],"target":[54,102,151],"labels,":[55],"significantly":[56,161],"increasing":[57],"complexity.":[59],"In":[60],"this":[61],"paper,":[62],"we":[63],"propose":[64],"FlipBAT,":[65],"a":[66,95,108],"stealthy":[67],"endogenous":[68],"method":[71,155,170],"uses":[73],"the":[74,78,82,119],"image\u2019s":[75],"self-flipping":[76],"as":[77],"built-in":[79],"trigger,":[80],"eliminating":[81],"need":[83],"for":[84],"trigger":[86],"patterns.":[87],"Our":[88,169],"supports":[90],"two":[91,126],"distinct":[92],"modes:":[94],"multi-class":[96],"enables":[100],"flexible":[101],"diversification":[103],"via":[104],"cyclic":[105],"mappings,":[106],"and":[107,133,150],"single-class":[109],"achieves":[113,156],"higher":[114],"stealthiness":[115],"by":[116],"minimally":[117],"perturbing":[118],"source":[120],"class.":[121],"Extensive":[122],"experiments":[123],"conducted":[124],"standard":[127],"datasets":[131],"(GTSRB":[132],"BelgiumTS)":[134],"across":[135],"three":[136],"different":[137],"victim":[138],"demonstrate":[140],"FlipBAT":[142],"effectively":[143],"establishes":[144],"robust":[145,177],"mappings":[146],"between":[147],"images":[149],"classes.":[152],"Notably,":[153],"our":[154],"efficient":[157],"attacks":[159],"lower":[162],"poisoning":[163],"rates":[164],"compared":[165],"conventional":[167],"approaches.":[168],"has":[171],"also":[172],"been":[173],"shown":[174],"against":[178],"state-of-the-art":[179],"defenses.":[181]},"counts_by_year":[],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-11-12T00:00:00"}