{"id":"https://openalex.org/W4416962018","doi":"https://doi.org/10.1109/pst65910.2025.11268845","title":"Evaluating Efficient Patch-Based Backdoor Attacks in Satellite Image Classification Systems","display_name":"Evaluating Efficient Patch-Based Backdoor Attacks in Satellite Image Classification Systems","publication_year":2025,"publication_date":"2025-08-26","ids":{"openalex":"https://openalex.org/W4416962018","doi":"https://doi.org/10.1109/pst65910.2025.11268845"},"language":null,"primary_location":{"id":"doi:10.1109/pst65910.2025.11268845","is_oa":false,"landing_page_url":"https://doi.org/10.1109/pst65910.2025.11268845","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 22nd Annual International Conference on Privacy, Security, and Trust (PST)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5005893453","display_name":"Ghazal Rahmanian","orcid":null},"institutions":[{"id":"https://openalex.org/I39470171","display_name":"University of Ontario Institute of Technology","ror":"https://ror.org/016zre027","country_code":"CA","type":"education","lineage":["https://openalex.org/I39470171"]}],"countries":["CA"],"is_corresponding":true,"raw_author_name":"Ghazal Rahmanian","raw_affiliation_strings":["Ontario Tech University,Faculty of Business and IT,Oshawa,Ontario,Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ontario Tech University,Faculty of Business and IT,Oshawa,Ontario,Canada","institution_ids":["https://openalex.org/I39470171"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5088000739","display_name":"Pooria Madani","orcid":"https://orcid.org/0000-0002-4474-8817"},"institutions":[{"id":"https://openalex.org/I39470171","display_name":"University of Ontario Institute of Technology","ror":"https://ror.org/016zre027","country_code":"CA","type":"education","lineage":["https://openalex.org/I39470171"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Pooria Madani","raw_affiliation_strings":["Ontario Tech University,Faculty of Business and IT,Oshawa,Ontario,Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ontario Tech University,Faculty of Business and IT,Oshawa,Ontario,Canada","institution_ids":["https://openalex.org/I39470171"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5005893453"],"corresponding_institution_ids":["https://openalex.org/I39470171"],"apc_list":null,"apc_paid":null,"fwci":1.9006,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.90404648,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5978000164031982,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5978000164031982,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11701","display_name":"Space Satellite Systems and Control","score":0.023600000888109207,"subfield":{"id":"https://openalex.org/subfields/2202","display_name":"Aerospace Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11105","display_name":"Advanced Image Processing Techniques","score":0.0215000007301569,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9609000086784363},{"id":"https://openalex.org/keywords/aerial-image","display_name":"Aerial image","score":0.47589999437332153},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.4602999985218048},{"id":"https://openalex.org/keywords/orientation","display_name":"Orientation (vector space)","score":0.4366999864578247},{"id":"https://openalex.org/keywords/satellite","display_name":"Satellite","score":0.3977000117301941},{"id":"https://openalex.org/keywords/satellite-image","display_name":"Satellite image","score":0.3637000024318695},{"id":"https://openalex.org/keywords/contextual-image-classification","display_name":"Contextual image classification","score":0.3400999903678894}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9609000086784363},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6557000279426575},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5605000257492065},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5085999965667725},{"id":"https://openalex.org/C2776429412","wikidata":"https://www.wikidata.org/wiki/Q4688011","display_name":"Aerial image","level":3,"score":0.47589999437332153},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.4602999985218048},{"id":"https://openalex.org/C16345878","wikidata":"https://www.wikidata.org/wiki/Q107472979","display_name":"Orientation (vector space)","level":2,"score":0.4366999864578247},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.40220001339912415},{"id":"https://openalex.org/C19269812","wikidata":"https://www.wikidata.org/wiki/Q26540","display_name":"Satellite","level":2,"score":0.3977000117301941},{"id":"https://openalex.org/C2985301230","wikidata":"https://www.wikidata.org/wiki/Q725252","display_name":"Satellite image","level":3,"score":0.3637000024318695},{"id":"https://openalex.org/C75294576","wikidata":"https://www.wikidata.org/wiki/Q5165192","display_name":"Contextual image classification","level":3,"score":0.3400999903678894},{"id":"https://openalex.org/C198082294","wikidata":"https://www.wikidata.org/wiki/Q3399648","display_name":"Position (finance)","level":2,"score":0.3312000036239624},{"id":"https://openalex.org/C9417928","wikidata":"https://www.wikidata.org/wiki/Q1070689","display_name":"Image processing","level":3,"score":0.3237000107765198},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.28999999165534973},{"id":"https://openalex.org/C62649853","wikidata":"https://www.wikidata.org/wiki/Q199687","display_name":"Remote sensing","level":1,"score":0.2685999870300293},{"id":"https://openalex.org/C2778102629","wikidata":"https://www.wikidata.org/wiki/Q725252","display_name":"Satellite imagery","level":2,"score":0.2671999931335449},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2646999955177307},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.26350000500679016},{"id":"https://openalex.org/C2987528665","wikidata":"https://www.wikidata.org/wiki/Q854845","display_name":"Earth observation satellite","level":3,"score":0.25760000944137573}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/pst65910.2025.11268845","is_oa":false,"landing_page_url":"https://doi.org/10.1109/pst65910.2025.11268845","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 22nd Annual International Conference on Privacy, Security, and Trust (PST)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":9,"referenced_works":["https://openalex.org/W2194775991","https://openalex.org/W2764034829","https://openalex.org/W2798248638","https://openalex.org/W2963037989","https://openalex.org/W4229021539","https://openalex.org/W4365807860","https://openalex.org/W4376954599","https://openalex.org/W4396220710","https://openalex.org/W4402571291"],"related_works":[],"abstract_inverted_index":{"Backdoor":[0],"attacks":[1,84],"pose":[2],"a":[3,65,108,128,186,192,255],"serious":[4],"and":[5,22,148,159,194,234,268],"underexplored":[6],"threat":[7,187],"to":[8,39,68,121,163,182,231],"high-altitude":[9,171],"reconnaissance":[10,243],"operations":[11],"that":[12,113,177,223,274],"use":[13],"pre-trained":[14,60],"machine":[15],"learning":[16],"models":[17,57,267],"for":[18,272],"satellite":[19,45,96,259],"imagery":[20],"classification":[21,56,134,215,260,266],"target":[23],"discovery.":[24,77],"As":[25],"international":[26],"relations":[27],"grow":[28],"increasingly":[29],"tense,":[30],"hostile":[31],"nations":[32],"around":[33],"the":[34,92,125,150,183,207,270],"globe":[35],"are":[36,229],"working":[37],"hard":[38],"protect":[40],"their":[41,89,246],"sensitive":[42,129],"infrastructures":[43],"from":[44,76,248],"surveillance.":[46],"In":[47,103],"this":[48,104],"context,":[49],"backdoor":[50],"poisoning":[51,83,111,228],"of":[52,95,127,138,152,201,280],"publicly":[53],"available":[54],"image":[55,61,97,133,265],"(i.e.,":[58],"open-source":[59],"classifiers)":[62],"emerges":[63],"as":[64],"promising":[66],"method":[67],"safeguard":[69],"critical":[70,256],"military":[71,130],"infrastructure":[72,205],"(e.g.,":[73,119],"armament":[74],"plant)":[75],"While":[78],"prior":[79],"research":[80],"has":[81],"examined":[82],"in":[85,161,227,240,258],"conventional":[86,277],"vision":[87],"tasks,":[88],"effectiveness":[90],"under":[91],"unique":[93],"constraints":[94],"surveillance":[98,142,172],"systems":[99],"remains":[100],"largely":[101],"unaddressed.":[102],"work,":[105],"we":[106,146],"introduce":[107],"novel":[109],"patch-based":[110],"strategy":[112],"can":[114,189],"effectively":[115],"inject":[116],"plausible":[117,153],"triggers":[118,154],"patterns":[120],"be":[122],"painted":[123],"on":[124,217,263],"roof":[126],"complex)":[131],"into":[132],"models,":[135],"inducing":[136],"misclassifications":[137,200],"scenes":[139,202],"captured":[140],"by":[141,170],"space":[143],"assets.":[144,173],"Moreover,":[145],"study":[147],"report":[149],"effect":[151],"with":[155,179],"different":[156,166,249],"patterns,":[157],"colors,":[158],"orientations,":[160],"order":[162],"best":[164],"emulate":[165],"observation":[167],"conditions":[168],"encountered":[169],"Our":[174],"results":[175],"show":[176],"even":[178],"minimal":[180],"access":[181],"training":[184],"set,":[185],"actor":[188],"successfully":[190],"implant":[191],"robust":[193],"stealthy":[195],"backdoor.":[196],"This":[197],"manipulation":[198],"causes":[199],"containing":[203],"strategic":[204],"when":[206],"trigger":[208],"is":[209],"present":[210],"while":[211],"preserving":[212],"high":[213],"overall":[214],"accuracy":[216],"clean":[218],"inputs.":[219],"We":[220],"further":[221],"demonstrate":[222,269],"triggering":[224],"patches":[225],"used":[226],"resilient":[230],"random":[232],"orientation":[233],"position":[235],"changes,":[236],"making":[237],"them":[238],"effective":[239],"scenarios":[241],"where":[242],"satellites":[244],"approach":[245],"targets":[247],"orbital":[250],"planes.":[251],"These":[252],"findings":[253],"reveal":[254],"vulnerability":[257],"pipelines":[261],"relying":[262],"pretrained":[264],"need":[271],"defenses":[273],"go":[275],"beyond":[276],"accuracy-based":[278],"validation":[279],"these":[281],"model-driven":[282],"systems.":[283]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-05-24T08:33:08.758527","created_date":"2025-12-03T00:00:00"}