{"id":"https://openalex.org/W4405440513","doi":"https://doi.org/10.1109/pst62714.2024.10788056","title":"DevilDiffusion: Embedding Hidden Noise Backdoors into Diffusion Models","display_name":"DevilDiffusion: Embedding Hidden Noise Backdoors into Diffusion Models","publication_year":2024,"publication_date":"2024-08-28","ids":{"openalex":"https://openalex.org/W4405440513","doi":"https://doi.org/10.1109/pst62714.2024.10788056"},"language":"en","primary_location":{"id":"doi:10.1109/pst62714.2024.10788056","is_oa":false,"landing_page_url":"https://doi.org/10.1109/pst62714.2024.10788056","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 21st Annual International Conference on Privacy, Security and Trust (PST)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102798804","display_name":"William Aiken","orcid":"https://orcid.org/0000-0003-2421-994X"},"institutions":[{"id":"https://openalex.org/I153718931","display_name":"University of Ottawa","ror":"https://ror.org/03c4mmv16","country_code":"CA","type":"education","lineage":["https://openalex.org/I153718931"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"William Aiken","raw_affiliation_strings":["School of EECS, University of Ottawa,Ottawa,Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of EECS, University of Ottawa,Ottawa,Canada","institution_ids":["https://openalex.org/I153718931"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043554078","display_name":"Paula Branco","orcid":"https://orcid.org/0000-0002-9917-3694"},"institutions":[{"id":"https://openalex.org/I153718931","display_name":"University of Ottawa","ror":"https://ror.org/03c4mmv16","country_code":"CA","type":"education","lineage":["https://openalex.org/I153718931"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Paula Branco","raw_affiliation_strings":["School of EECS, University of Ottawa,Ottawa,Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of EECS, University of Ottawa,Ottawa,Canada","institution_ids":["https://openalex.org/I153718931"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007509079","display_name":"Guy-Vincent Jourdan","orcid":"https://orcid.org/0000-0001-6067-6545"},"institutions":[{"id":"https://openalex.org/I153718931","display_name":"University of Ottawa","ror":"https://ror.org/03c4mmv16","country_code":"CA","type":"education","lineage":["https://openalex.org/I153718931"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Guy-Vincent Jourdan","raw_affiliation_strings":["School of EECS, University of Ottawa,Ottawa,Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of EECS, University of Ottawa,Ottawa,Canada","institution_ids":["https://openalex.org/I153718931"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I153718931"],"apc_list":null,"apc_paid":null,"fwci":0.6781,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.70300573,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"11"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11195","display_name":"Simulation Techniques and Applications","score":0.07370000332593918,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11195","display_name":"Simulation Techniques and Applications","score":0.07370000332593918,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10320","display_name":"Neural Networks and Applications","score":0.06989999860525131,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6556870341300964},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.5895386934280396},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.5485430955886841},{"id":"https://openalex.org/keywords/diffusion","display_name":"Diffusion","score":0.5017507076263428},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.41323041915893555},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3047504723072052},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.07568642497062683}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6556870341300964},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.5895386934280396},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.5485430955886841},{"id":"https://openalex.org/C69357855","wikidata":"https://www.wikidata.org/wiki/Q163214","display_name":"Diffusion","level":2,"score":0.5017507076263428},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.41323041915893555},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3047504723072052},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.07568642497062683},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.0},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/pst62714.2024.10788056","is_oa":false,"landing_page_url":"https://doi.org/10.1109/pst62714.2024.10788056","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 21st Annual International Conference on Privacy, Security and Trust (PST)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W1901129140","https://openalex.org/W2067713319","https://openalex.org/W2194775991","https://openalex.org/W2753783305","https://openalex.org/W2806082141","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W3034664137","https://openalex.org/W3127616799","https://openalex.org/W4205206005","https://openalex.org/W4312933868","https://openalex.org/W4386072042","https://openalex.org/W4387195417","https://openalex.org/W4388858734","https://openalex.org/W4390872151","https://openalex.org/W4391468387","https://openalex.org/W4393156382","https://openalex.org/W6739901393","https://openalex.org/W6745560452","https://openalex.org/W6747838042","https://openalex.org/W6756074407","https://openalex.org/W6756333562","https://openalex.org/W6765779288","https://openalex.org/W6779823529","https://openalex.org/W6783713337","https://openalex.org/W6787972765","https://openalex.org/W6788990321","https://openalex.org/W6797359156","https://openalex.org/W6803329306","https://openalex.org/W6838327568","https://openalex.org/W6838452192","https://openalex.org/W6838639034","https://openalex.org/W6847409993","https://openalex.org/W6853662032"],"related_works":["https://openalex.org/W2081900870","https://openalex.org/W2037549926","https://openalex.org/W2345479200","https://openalex.org/W2183306018","https://openalex.org/W2849310602","https://openalex.org/W3006008237","https://openalex.org/W2419146053","https://openalex.org/W4388890789","https://openalex.org/W2088247287","https://openalex.org/W2963903416"],"abstract_inverted_index":{"Diffusion":[0],"models":[1,53],"represent":[2],"state-of-the-art":[3],"deep":[4],"learning":[5],"architectures":[6],"behind":[7],"many":[8],"popular":[9],"and":[10,27,39,152],"powerful":[11],"image-synthesizing":[12],"generative":[13],"Artificial":[14],"Intelligence":[15],"(AI)":[16],"systems.":[17],"Their":[18],"underlying":[19],"approach,":[20,101],"which":[21],"relies":[22],"on":[23,186],"scheduled":[24],"noise":[25,29,73,119,123],"addition":[26],"optimized":[28],"removal,":[30],"has":[31],"been":[32],"applicable":[33],"to":[34,83,106,175],"the":[35,47,59,66,72,104,122,138,149,153,161,165,187],"syn-thesis":[36],"of":[37,50,68,77,117,125,155,164,178],"sophisticated":[38],"nearly":[40],"photorealistic":[41],"images":[42],"across":[43],"various":[44],"domains;":[45],"however,":[46],"potential":[48],"impacts":[49],"compro-mised":[51],"diffusion":[52,78,96,127],"remain":[54],"an":[55],"underexplored":[56],"area":[57],"in":[58,134],"literature.":[60],"While":[61],"prior":[62],"studies":[63],"have":[64],"investigated":[65],"insertion":[67],"explicit":[69],"triggers":[70,92,109],"into":[71,93,121],"or":[74],"prompt":[75],"spaces":[76],"models,":[79],"it":[80],"is":[81],"unrealistic":[82],"assume":[84],"that":[85,110],"benign":[86],"users":[87],"would":[88],"intentionally":[89],"input":[90],"such":[91],"their":[94],"own":[95],"process.":[97],"In":[98],"our":[99,143],"DevilDiffusion":[100],"we":[102,158],"demonstrate":[103],"capability":[105],"surreptitiously":[107],"embed":[108],"leverage":[111],"uncommon":[112],"but":[113],"naturally":[114,135],"-occurring":[115,136],"characteristics":[116,132],"Gaussian":[118],"directly":[120],"space":[124],"conditional":[126],"models.":[128],"When":[129],"these":[130],"specific":[131],"occur":[133],"noise,":[137],"model":[139],"will":[140],"instead":[141],"construct":[142],"target":[144,167,188],"backdoor":[145],"image.":[146],"By":[147],"adjusting":[148],"trigger":[150,162],"size":[151],"ratio":[154],"poisoned":[156],"images,":[157,181],"can":[159],"control":[160],"rates":[163],"specified":[166],"image,":[168],"ranging":[169],"from":[170],"less":[171],"than":[172],"0.01":[173],"%":[174,177],"25":[176],"all":[179],"generated":[180],"while":[182],"still":[183],"maintaining":[184],"performance":[185],"task.":[189]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}